chore(deps): pin dependencies #12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - "**/*.md" | |
| - "docs/**/*" | |
| push: | |
| branches: | |
| - main | |
| - release/* | |
| paths-ignore: | |
| - "**/*.md" | |
| - "docs/**/*" | |
| name: Build release binaries | |
| jobs: | |
| publish: | |
| name: Publishing ${{ matrix.job.target }} | |
| runs-on: ${{ matrix.job.os }} | |
| strategy: | |
| matrix: | |
| rust: [stable] | |
| job: | |
| - os: windows-latest | |
| os-name: windows | |
| target: x86_64-pc-windows-msvc | |
| architecture: x86_64 | |
| binary-postfix: ".exe" | |
| use-cross: false | |
| - os: macos-latest | |
| os-name: macos | |
| target: x86_64-apple-darwin | |
| architecture: x86_64 | |
| binary-postfix: "" | |
| use-cross: false | |
| - os: macos-latest | |
| os-name: macos | |
| target: aarch64-apple-darwin | |
| architecture: arm64 | |
| binary-postfix: "" | |
| use-cross: true | |
| - os: ubuntu-latest | |
| os-name: linux | |
| target: x86_64-unknown-linux-gnu | |
| architecture: x86_64 | |
| binary-postfix: "" | |
| use-cross: false | |
| - os: ubuntu-latest | |
| os-name: linux | |
| target: x86_64-unknown-linux-musl | |
| architecture: x86_64 | |
| binary-postfix: "" | |
| use-cross: false | |
| - os: ubuntu-latest | |
| os-name: linux | |
| target: aarch64-unknown-linux-gnu | |
| architecture: arm64 | |
| binary-postfix: "" | |
| use-cross: true | |
| - os: ubuntu-latest | |
| os-name: linux | |
| target: i686-unknown-linux-gnu | |
| architecture: i686 | |
| binary-postfix: "" | |
| use-cross: true | |
| - os: ubuntu-latest | |
| os-name: netbsd | |
| target: x86_64-unknown-netbsd | |
| architecture: x86_64 | |
| binary-postfix: "" | |
| use-cross: true | |
| - os: ubuntu-latest | |
| os-name: linux | |
| target: armv7-unknown-linux-gnueabihf | |
| architecture: armv7 | |
| binary-postfix: "" | |
| use-cross: true | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Install Rust toolchain | |
| uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1 | |
| with: | |
| toolchain: ${{ matrix.rust }} | |
| profile: minimal | |
| override: true | |
| target: ${{ matrix.job.target }} | |
| - name: install compiler | |
| shell: bash | |
| run: | | |
| if [[ ${{ matrix.job.target }} == x86_64-unknown-linux-musl ]]; then | |
| sudo apt update | |
| sudo apt-get install -y musl-tools | |
| fi | |
| - name: install cargo-auditable for non-cross builds | |
| shell: bash | |
| if: ${{ matrix.job.use_cross != true}} | |
| run: | | |
| cargo install cargo-auditable cargo-audit | |
| - uses: Swatinem/rust-cache@e207df5d269b42b69c8bc5101da26f7d31feddb4 # v2 | |
| with: | |
| key: ${{ matrix.job.target }} | |
| - name: Set Version | |
| shell: bash | |
| run: echo "PROJECT_VERSION=$(git describe --tags)" >> $GITHUB_ENV | |
| - name: Cargo build | |
| uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1 | |
| if: ${{ matrix.job.use-cross == true }} | |
| with: | |
| command: build | |
| use-cross: ${{ matrix.job.use-cross }} | |
| toolchain: ${{ matrix.rust }} | |
| args: --release --target ${{ matrix.job.target }} | |
| - name: Cargo auditable build | |
| uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # v1 | |
| if: ${{ matrix.job.use-cross == false }} | |
| with: | |
| command: auditable | |
| use-cross: ${{ matrix.job.use-cross }} | |
| toolchain: ${{ matrix.rust }} | |
| args: build --release --target ${{ matrix.job.target }} | |
| - name: Packaging final binary | |
| shell: bash | |
| id: package-binary | |
| run: | | |
| cp -a config target/${{ matrix.job.target }}/release/config | |
| cd target/${{ matrix.job.target }}/release | |
| ########## create tar.gz ########## | |
| # accounting for main branch and therefore beta builds | |
| if [[ ${{ github.ref }} = refs/heads/main ]]; then | |
| RELEASE_NAME=organize-beta-${{ matrix.job.target}}.tar.gz | |
| elif [[ ${{ github.ref }} = refs/tags/* ]]; then | |
| RELEASE_NAME=organize-${{ github.ref_name }}-${{ matrix.job.target}}.tar.gz | |
| else | |
| RELEASE_NAME=organize-${{ github.run_id }}-${{ github.run_attempt }}-${{ matrix.job.target}}.tar.gz | |
| fi | |
| tar czvf $RELEASE_NAME organize${{ matrix.job.binary-postfix }} config/ | |
| ########## create sha256 ########## | |
| if [[ ${{ runner.os }} == 'Windows' ]]; then | |
| certutil -hashfile $RELEASE_NAME sha256 | grep -E [A-Fa-f0-9]{64} > $RELEASE_NAME.sha256 | |
| else | |
| shasum -a 256 $RELEASE_NAME > $RELEASE_NAME.sha256 | |
| fi | |
| echo "release_name=$RELEASE_NAME" >> $GITHUB_OUTPUT | |
| - name: Storing binary as artefact | |
| uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3 | |
| with: | |
| name: binary-${{ matrix.job.target}} | |
| path: target/${{ matrix.job.target }}/release/${{ steps.package-binary.outputs.release_name }}* | |
| - name: Releasing release versions | |
| uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 | |
| if: startsWith(github.ref, 'refs/tags/') | |
| with: | |
| files: | | |
| target/${{ matrix.job.target }}/release/${{ steps.package-binary.outputs.release_name }}* | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # publish-beta: | |
| # name: Publishing beta-builds | |
| # needs: publish | |
| # if: ${{ github.ref == 'refs/heads/main' }} | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Download all workflow run artifacts | |
| # uses: actions/download-artifact@v3 | |
| # - name: Releasing beta builds | |
| # shell: bash | |
| # run: | | |
| # # set up some directories | |
| # WORKING_DIR=$(mktemp -d) | |
| # DEST_DIR=beta | |
| # # set up the github deploy key | |
| # mkdir -p ~/.ssh | |
| # echo "${{ secrets.BETA_RELEASE_KEY }}" > ~/.ssh/id_rsa | |
| # chmod 600 ~/.ssh/id_rsa | |
| # # set up git | |
| # git config --global user.name "${{ github.actor }}" | |
| # git config --global user.email "${{ github.actor }}" | |
| # ssh-keyscan -H github.com > ~/.ssh/known_hosts | |
| # GIT_SSH='ssh -i ~/.ssh/id_rsa -o UserKnownHostsFile=~/.ssh/known_hosts' | |
| # # clone the repo into our working directory | |
| # GIT_SSH_COMMAND=$GIT_SSH git clone [email protected]:organize-rs/organize-beta.git $WORKING_DIR | |
| # # ensure destination directory exists | |
| # mkdir -p $WORKING_DIR/$DEST_DIR | |
| # # do the copy | |
| # for i in binary-*; do cp -a $i/* $WORKING_DIR/$DEST_DIR; done | |
| # # create the commit | |
| # cd $WORKING_DIR | |
| # git add . | |
| # git commit -m "${{ github.job }} from https://github.com/${{ github.repository }}/commit/${{ github.sha }}" || echo | |
| # GIT_SSH_COMMAND=$GIT_SSH git pull --rebase | |
| # GIT_SSH_COMMAND=$GIT_SSH git push | |
| # # publish-cargo: | |
| # # name: Publishing to Cargo | |
| # # runs-on: ubuntu-latest | |
| # # steps: | |
| # # - name: Checkout repository | |
| # # uses: actions/checkout@v3 | |
| # # - uses: actions-rs/toolchain@v1 | |
| # # with: | |
| # # toolchain: stable | |
| # # profile: minimal | |
| # # override: true | |
| # # - uses: Swatinem/rust-cache@v2 | |
| # # with: | |
| # # key: ${{ matrix.job.target }} | |
| # # - uses: actions-rs/cargo@v1 | |
| # # with: | |
| # # command: publish | |
| # # args: --token ${{ secrets.CARGO_API_KEY }} |