configure workflows, changesets

SiaFoundation · Jan 26, 2024 · cb3cf57 · cb3cf57
1 parent 000ba3d
commit cb3cf57
Show file tree

Hide file tree

Showing 8 changed files with 25,372 additions and 27 deletions.
diff --git a/.changeset/README.md b/.changeset/README.md
@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)
diff --git a/.changeset/config.json b/.changeset/config.json
@@ -0,0 +1,12 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [],
+  "privatePackages": { "version": true, "tag": true }
+}
diff --git a/.changeset/twenty-chefs-flow.md b/.changeset/twenty-chefs-flow.md
@@ -0,0 +1,6 @@
+---
+'hostd': minor
+'renterd': minor
+---
+
+Test changesets.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -0,0 +1,98 @@
+name: PR
+on:
+  pull_request:
+
+jobs:
+  mac:
+    strategy:
+      matrix:
+        app: [hostd, renterd]
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 20
+      - name: Setup signing
+        env:
+          APPLE_CERT_ID: ${{ secrets.APPLE_CERT_ID }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_KEY_B64: ${{ secrets.APPLE_KEY_B64 }}
+          APPLE_CERT_B64: ${{ secrets.APPLE_CERT_B64 }}
+          APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
+          APPLE_KEYCHAIN_PASSWORD: ${{ secrets.APPLE_KEYCHAIN_PASSWORD }}
+        run: |
+          # extract apple cert
+          APPLE_CERT_PATH=$RUNNER_TEMP/apple_cert.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+          echo -n "$APPLE_CERT_B64" | base64 --decode --output $APPLE_CERT_PATH
+
+          # extract apple key
+          mkdir -p ~/private_keys
+          APPLE_API_KEY_PATH=~/private_keys/AuthKey_$APPLE_API_KEY.p8
+          echo "APPLE_API_KEY_PATH=$APPLE_API_KEY_PATH" >> $GITHUB_ENV
+          echo -n "$APPLE_KEY_B64" | base64 --decode --output $APPLE_API_KEY_PATH
+
+          # create temp keychain
+          security create-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security default-keychain -s $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$APPLE_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # import keychain
+          security import $APPLE_CERT_PATH -P $APPLE_CERT_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security find-identity -v $KEYCHAIN_PATH -p codesigning
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k $APPLE_KEYCHAIN_PASSWORD $KEYCHAIN_PATH
+      - name: Install dependencies
+        run: |
+          cd ${{ matrix.app }}
+          npm install
+      - name: Build
+        run: |
+          cd ${{ matrix.app }}
+          npm run build
+      - name: Package executable bundles, sign and notarize, make distributables
+        env:
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_API_KEY_PATH: ${{ env.APPLE_API_KEY_PATH }}
+        run: |
+          cd ${{ matrix.app }}
+          npm run make
+      - name: Upload
+        uses: actions/upload-artifact@v3
+        with:
+          name: ${{ matrix.app }}
+          path: make/zip/darwin/arm64/${{ matrix.app }}-darwin-arm64.zip
+  # windows:
+  #   strategy:
+  #     matrix:
+  #       app: [hostd, renterd]
+  #   runs-on: windows-latest
+  #   steps:
+  #     - uses: actions/checkout@v3
+  #     - uses: actions/setup-node@v3
+  #       with:
+  #         node-version: 20
+  #     - name: Setup signing
+  #       shell: bash
+  #       run: |
+  #         dotnet tool install --global AzureSignTool
+  #     - name: Install dependencies
+  #       run: |
+  #         cd ${{ matrix.app }}
+  #         npm install
+  #     - name: Build
+  #       run: |
+  #         cd ${{ matrix.app }}
+  #         npm run build
+  #     - name: Package into executable bundle
+  #       shell: bash
+  #       run: |
+  #         cd ${{ matrix.app }}
+  #         npm run make
+  #         # TODO: probably not correct
+  #         APP_PATH="out/${{ matrix.app }}-win32-x64/${{ matrix.app }}.app"
+  #         BINARY_PATH="$APP_PATH/Contents/Windows/${{ matrix.app }}.exe"
+  #         azuresigntool sign -kvu "${{ secrets.AZURE_KEY_VAULT_URI }}" -kvi "${{ secrets.AZURE_CLIENT_ID }}" -kvt "${{ secrets.AZURE_TENANT_ID }}" -kvs "${{ secrets.AZURE_CLIENT_SECRET }}" -kvc ${{ secrets.AZURE_CERT_NAME }} -tr http://timestamp.digicert.com -v $BINARY_PATH
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,4 +1,4 @@
-name: Publish
+name: Publish distributables into new GitHub release
 
 on:
   push:
@@ -59,27 +59,14 @@ jobs:
         run: |
           cd ${{ matrix.app }}
           npm run build
-      - name: Package into executable bundle
+      - name: Package executable bundles, sign and notarize, make distributables
         env:
           APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
           APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
           APPLE_API_KEY_PATH: ${{ env.APPLE_API_KEY_PATH }}
         run: |
           cd ${{ matrix.app }}
-          npm run package
-          # APP_PATH="out/${{ matrix.app }}-darwin-arm64/${{ matrix.app }}.app"
-          # BINARY_PATH="$APP_PATH/Contents/MacOS/${{ matrix.app }}"
-          # /usr/bin/codesign --deep -f -v --timestamp -o runtime,library -s $APPLE_CERT_ID $BINARY_PATH
-          # xcrun notarytool submit -k ~/private_keys/AuthKey_$APPLE_API_KEY.p8 -d $APPLE_API_KEY -i $APPLE_API_ISSUER --wait --timeout 10m $APP_PATH
-      - name: Make distributables
-        run: |
-          cd ${{ matrix.app }}
-          npm run make --skip-package
-      - name: Upload
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{ matrix.app }}
-          path: make/zip/darwin/arm64/${{ matrix.app }}-darwin-arm64.zip
+          npm run publish
   # windows:
   #   strategy:
   #     matrix:
@@ -107,18 +94,8 @@ jobs:
   #       shell: bash
   #       run: |
   #         cd ${{ matrix.app }}
-  #         npm run package
+  #         npm run make
   #         # TODO: probably not correct
   #         APP_PATH="out/${{ matrix.app }}-win32-x64/${{ matrix.app }}.app"
   #         BINARY_PATH="$APP_PATH/Contents/Windows/${{ matrix.app }}.exe"
   #         azuresigntool sign -kvu "${{ secrets.AZURE_KEY_VAULT_URI }}" -kvi "${{ secrets.AZURE_CLIENT_ID }}" -kvt "${{ secrets.AZURE_TENANT_ID }}" -kvs "${{ secrets.AZURE_CLIENT_SECRET }}" -kvc ${{ secrets.AZURE_CERT_NAME }} -tr http://timestamp.digicert.com -v $BINARY_PATH
-  #     - name: Make distributables
-  #       run: |
-  #         cd ${{ matrix.app }}
-  #         npm run make --skip-package
-  #     - name: Upload
-  #       uses: actions/upload-artifact@v3
-  #       with:
-  #         name: ${{ matrix.app }}
-  #         # TODO: probably not correct
-  #         path: make/zip/win32/x64/${{ matrix.app }}-win32-x64.zip
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -0,0 +1,23 @@
+name: Update release PR or publish GitHub release
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency: commits-to-main
+
+jobs:
+  release-main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 20
+      - name: Update release pull request or publish
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          commit: 'chore: release packages'
+          publish: npm run release