Fix signing identity #72
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Preview CI | |
| on: | |
| push: | |
| branches: | |
| - preview | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| BuildBinaries: | |
| name: Build application packages | |
| strategy: | |
| matrix: | |
| runtime: [ linux-x64, osx-x64, win-x64, android ] | |
| include: | |
| - runtime: linux-x64 | |
| arch: x64 | |
| os: ubuntu-latest | |
| shell: bash | |
| build: packageReleaseUberJarForCurrentOS packageReleaseDeb | |
| setupCl: ./scripts/SetupClUnix.sh | |
| - runtime: osx-x64 | |
| arch: x64 | |
| os: macOS-latest | |
| shell: bash | |
| build: packageReleaseUberJarForCurrentOS packageReleaseDmg notarizeReleaseDmg | |
| setupCl: ./scripts/SetupClUnix.sh | |
| - runtime: win-x64 | |
| arch: x64 | |
| os: windows-latest | |
| shell: powershell | |
| build: packageReleaseUberJarForCurrentOS packageReleaseMsi | |
| setupCl: ./scripts/SetupClWindows.ps1 | |
| - runtime: android | |
| arch: x64 | |
| os: ubuntu-latest | |
| shell: bash | |
| build: :android:assembleRelease | |
| setupCl: ./scripts/SetupClUnix.sh | |
| runs-on: ${{ matrix.os }} | |
| timeout-minutes: 60 | |
| defaults: | |
| run: | |
| shell: ${{ matrix.shell }} | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| architecture: ${{ matrix.arch }} | |
| - name: Setup Cl | |
| run: ${{ matrix.setupCl }} | |
| - name: Setup MacOS Keychain | |
| uses: apple-actions/import-codesign-certs@v1 | |
| if: ${{ matrix.runtime == 'osx-x64' }} | |
| with: | |
| p12-file-base64: ${{ secrets.APPLE_CERT }} | |
| p12-password: ${{ secrets.APPLE_CERT_PASSWORD }} | |
| - name: Set commit count | |
| shell: bash | |
| run: | | |
| commit_count=$(git rev-list --count HEAD) | |
| echo "COMMIT_COUNT=$commit_count" >> $GITHUB_ENV | |
| - name: Build | |
| uses: gradle/gradle-build-action@v2 | |
| with: | |
| arguments: > | |
| ${{ matrix.build }} | |
| -Pcompose.desktop.mac.sign=true | |
| -Pcompose.desktop.mac.signing.identity=${{ secrets.APPLE_IDENTITY }} | |
| -Pcompose.desktop.mac.notarization.appleID=${{ secrets.APPLE_ID }} | |
| -Pcompose.desktop.mac.notarization.password=${{ secrets.APPLE_PASSWORD }} | |
| -Pcompose.desktop.mac.notarization.teamID=${{ secrets.APPLE_TEAM_ID }} | |
| -Ppreview="${{ env.COMMIT_COUNT }}" | |
| --stacktrace | |
| - name: Sign APK | |
| uses: r0adkll/sign-android-release@v1 | |
| if: ${{ matrix.runtime == 'android' }} | |
| with: | |
| releaseDirectory: android/build/outputs/apk/release | |
| signingKeyBase64: ${{ secrets.ANDROID_SIGNING_KEY }} | |
| alias: ${{ secrets.ANDROID_KEY_ALIAS }} | |
| keyStorePassword: ${{ secrets.ANDROID_KEY_STORE_PASSWORD }} | |
| keyPassword: ${{ secrets.ANDROID_KEY_PASSWORD }} | |
| # Upload runner package tar.gz/zip as artifact | |
| - name: Publish Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: runner-package-${{ matrix.runtime }} | |
| path: | | |
| desktop/build/compose/binaries/main/*/ | |
| desktop/build/compose/binaries/main-release/*/ | |
| desktop/build/compose/jars/ | |
| !desktop/build/compose/binaries/main/app/ | |
| ${{ env.SIGNED_RELEASE_FILE }} | |
| # Upload runner errors | |
| - name: Upload error logs | |
| uses: actions/upload-artifact@v3 | |
| if: ${{ failure() }} | |
| with: | |
| name: runner-errors-${{ matrix.runtime }} | |
| path: | | |
| desktop/build/compose/logs/ | |
| BuildRpm: | |
| name: Build application RPM package | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup Cl | |
| run: ./scripts/SetupClUnix.sh | |
| - name: Set commit count | |
| shell: bash | |
| run: | | |
| commit_count=$(git rev-list --count HEAD) | |
| echo "COMMIT_COUNT=$commit_count" >> $GITHUB_ENV | |
| - name: Build rpm Package | |
| uses: Syer10/Fedora-Java17-Action@v1 | |
| with: | |
| command: ./gradlew packageReleaseRpm -Ppreview="${{ env.COMMIT_COUNT }}" --stacktrace | |
| # Upload runner package tar.gz/zip as artifact | |
| - name: Publish Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: runner-package-linux-fedora-x64 | |
| path: | | |
| desktop/build/compose/binaries/main/*/ | |
| desktop/build/compose/binaries/main-release/*/ | |
| desktop/build/compose/jars/ | |
| !desktop/build/compose/binaries/main/app/ | |
| # Upload runner errors | |
| - name: Upload error logs | |
| uses: actions/upload-artifact@v3 | |
| if: ${{ failure() }} | |
| with: | |
| name: runner-errors-linux-fedora-x64 | |
| path: | | |
| desktop/build/compose/logs/ | |
| ReleaseBinaries: | |
| name: Make a release | |
| needs: [ BuildBinaries,BuildRpm ] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Download Build Artifacts | |
| uses: actions/download-artifact@v3 | |
| - name: Fix rpm java dependency | |
| uses: Syer10/Fedora-Java17-Action@v1 | |
| with: | |
| command: ./scripts/RpmDependencyFix.sh | |
| - name: Fix deb java dependency | |
| run: ./scripts/DebDependencyFix.sh | |
| - name: Fix filenames | |
| run: ./scripts/NamingFix.sh preview | |
| - name: Get previous release | |
| id: last_release | |
| uses: Dmagine/get-latest-release@master | |
| with: | |
| myToken: ${{ github.token }} | |
| exclude_types: "draft|prerelease" | |
| view_top: 1 | |
| owner: Suwayomi | |
| repo: Tachidesk-JUI-preview | |
| - name: Prepare build | |
| run: | | |
| set -e | |
| commit_count=$(git rev-list --count HEAD) | |
| echo "COMMIT_COUNT=$commit_count" >> $GITHUB_ENV | |
| current_sha=$(git rev-parse --short HEAD) | |
| echo "CURRENT_SHA=$current_sha" >> $GITHUB_ENV | |
| prev_commit_count=$(echo "${{ steps.last_release.outputs.tag_name }}" | sed -e "s/^r//") | |
| commit_count_diff=$(expr $commit_count - $prev_commit_count) | |
| prev_release_sha=$(git rev-parse --short HEAD~$commit_count_diff) | |
| echo "PREV_RELEASE_SHA=$prev_release_sha" >> $GITHUB_ENV | |
| echo "COMMIT_LOGS<<{delimiter} | |
| $(curl -H "Accept: application/vnd.github.v3+json" \ | |
| "https://api.github.com/repos/suwayomi/tachidesk-jui/compare/$prev_release_sha...$current_sha" \ | |
| | jq '[.commits[]|{message:(.commit.message | split("\n")), username:.author.login}]' \ | |
| | jq -r '.[]|"- \(.message | first) (@\(.username))"') | |
| {delimiter}" >> $GITHUB_ENV | |
| - uses: ncipollo/release-action@v1 | |
| with: | |
| artifacts: "*/binaries/main/*/*.*,*/binaries/main-release/*/*.*,*/jars/*.jar,*/android/build/outputs/apk/release/*.apk" | |
| token: ${{ secrets.DEPLOY_PREVIEW_TOKEN }} | |
| repo: Tachidesk-JUI-preview | |
| tag: r${{ env.COMMIT_COUNT }} | |
| name: Tachidesk-JUI Preview r${{ env.COMMIT_COUNT }} | |
| body: | | |
| ### Commits | |
| https://github.com/Suwayomi/Tachidesk-JUI/compare/${{ env.PREV_RELEASE_SHA }}...${{ env.CURRENT_SHA }} | |
| ${{ env.COMMIT_LOGS }} | |
| - name: Prune old releases | |
| uses: dev-drprasad/[email protected] | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.DEPLOY_PREVIEW_TOKEN }} | |
| with: | |
| keep_latest: 15 | |
| delete_tags: true | |
| repo: Suwayomi/Tachidesk-JUI-preview |