chore: don't auto refresh the merge box when user has interacted with… #7010
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: release-nightly | |
| on: | |
| push: | |
| branches: [main, release/v*] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| nightly-binary: | |
| runs-on: namespace-profile-gitea-release-binary | |
| permissions: | |
| contents: read | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| # fetch all commits instead of only the last as some branches are long lived and could have many between versions | |
| # fetch all tags to ensure that "git describe" reports expected Gitea version, eg. v1.21.0-dev-1-g1234567 | |
| - run: git fetch --unshallow --quiet --tags --force | |
| - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | |
| with: | |
| go-version-file: go.mod | |
| check-latest: true | |
| - uses: ./.github/actions/node-setup | |
| - run: make deps-frontend deps-backend | |
| # xgo build | |
| - run: make release | |
| env: | |
| TAGS: bindata | |
| - name: Install Cosign | |
| uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 | |
| - name: import gpg key | |
| id: import_gpg | |
| uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0 | |
| with: | |
| gpg_private_key: ${{ secrets.GPGSIGN_KEY }} | |
| passphrase: ${{ secrets.GPGSIGN_PASSPHRASE }} | |
| - name: sign binaries | |
| env: | |
| GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }} | |
| GPG_PASSPHRASE: ${{ secrets.GPGSIGN_PASSPHRASE }} | |
| run: | | |
| for f in dist/release/*; do | |
| cosign sign-blob "$f" --bundle "$f.sigstore.json" --yes | |
| echo "$GPG_PASSPHRASE" | gpg --pinentry-mode loopback --passphrase-fd 0 --batch --yes --detach-sign -u "$GPG_FINGERPRINT" --output "$f.asc" "$f" | |
| done | |
| # clean branch name to get the folder name in S3 | |
| - name: Get cleaned branch name | |
| id: clean_name | |
| env: | |
| REF: ${{ github.ref }} | |
| run: | | |
| REF_NAME=$(echo "$REF" | sed -e 's/refs\/heads\///' -e 's/refs\/tags\///' -e 's/release\/v//') | |
| echo "Cleaned name is ${REF_NAME}" | |
| echo "branch=${REF_NAME}-nightly" >> "$GITHUB_OUTPUT" | |
| - name: configure aws | |
| uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1 | |
| with: | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| - name: upload binaries to s3 | |
| env: | |
| AWS_S3_BUCKET: ${{ secrets.AWS_S3_BUCKET }} | |
| BRANCH: ${{ steps.clean_name.outputs.branch }} | |
| run: | | |
| aws s3 sync dist/release "s3://$AWS_S3_BUCKET/gitea/$BRANCH" --no-progress | |
| nightly-container: | |
| runs-on: namespace-profile-gitea-release-docker | |
| permissions: | |
| contents: read | |
| packages: write # to publish to ghcr.io | |
| steps: | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 | |
| # fetch all commits instead of only the last as some branches are long lived and could have many between versions | |
| # fetch all tags to ensure that "git describe" reports expected Gitea version, eg. v1.21.0-dev-1-g1234567 | |
| - run: git fetch --unshallow --quiet --tags --force | |
| - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 | |
| - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 | |
| - name: Get cleaned branch name | |
| id: clean_name | |
| env: | |
| REF: ${{ github.ref }} | |
| run: | | |
| REF_NAME=$(echo "$REF" | sed -e 's/refs\/heads\///' -e 's/refs\/tags\///' -e 's/release\/v//') | |
| echo "branch=${REF_NAME}-nightly" >> "$GITHUB_OUTPUT" | |
| - uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0 | |
| id: meta | |
| with: | |
| images: |- | |
| gitea/gitea | |
| ghcr.io/go-gitea/gitea | |
| tags: | | |
| type=raw,value=${{ steps.clean_name.outputs.branch }} | |
| annotations: | | |
| org.opencontainers.image.authors="maintainers@gitea.io" | |
| - uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0 | |
| id: meta_rootless | |
| with: | |
| images: |- | |
| gitea/gitea | |
| ghcr.io/go-gitea/gitea | |
| # each tag below will have the suffix of -rootless | |
| flavor: | | |
| suffix=-rootless | |
| tags: | | |
| type=raw,value=${{ steps.clean_name.outputs.branch }} | |
| annotations: | | |
| org.opencontainers.image.authors="maintainers@gitea.io" | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4.3.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GHCR using PAT | |
| uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4.3.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: build regular docker image | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| with: | |
| context: . | |
| platforms: linux/amd64,linux/arm64,linux/riscv64 | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| annotations: ${{ steps.meta.outputs.annotations }} | |
| cache-from: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootful | |
| cache-to: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootful,mode=max | |
| - name: build rootless docker image | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| with: | |
| context: . | |
| platforms: linux/amd64,linux/arm64,linux/riscv64 | |
| push: true | |
| file: Dockerfile.rootless | |
| tags: ${{ steps.meta_rootless.outputs.tags }} | |
| annotations: ${{ steps.meta_rootless.outputs.annotations }} | |
| cache-from: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootless | |
| cache-to: type=registry,ref=ghcr.io/go-gitea/gitea:buildcache-rootless,mode=max |