133 lines
4.3 KiB
YAML
133 lines
4.3 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
release:
|
|
name: Build & publish plugin zip
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Build plugin zip
|
|
working-directory: ${{ github.workspace }}
|
|
run: |
|
|
set -euo pipefail
|
|
VERSION="${GITHUB_REF_NAME#v}"
|
|
OUT="dist/projects-portfolio-v${VERSION}.zip"
|
|
|
|
rm -rf dist
|
|
mkdir -p dist
|
|
|
|
# Use Python's stdlib zipfile module — guaranteed to be on ubuntu-latest.
|
|
python3 - "$OUT" <<'PYEOF'
|
|
import os
|
|
import sys
|
|
import zipfile
|
|
|
|
out_path = sys.argv[1]
|
|
allowed = [
|
|
"projects-portfolio.php",
|
|
"README.md",
|
|
"LICENSE",
|
|
"admin",
|
|
"assets",
|
|
"includes",
|
|
"languages",
|
|
"templates",
|
|
]
|
|
|
|
with zipfile.ZipFile(out_path, "w", compression=zipfile.ZIP_DEFLATED) as zf:
|
|
for entry in allowed:
|
|
if os.path.isdir(entry):
|
|
for root, _, files in os.walk(entry):
|
|
for name in files:
|
|
abs_path = os.path.join(root, name)
|
|
arcname = os.path.join("projects-portfolio", abs_path)
|
|
zf.write(abs_path, arcname)
|
|
elif os.path.isfile(entry):
|
|
zf.write(entry, os.path.join("projects-portfolio", entry))
|
|
else:
|
|
sys.exit(f"Allowlisted path missing: {entry}")
|
|
PYEOF
|
|
|
|
echo "Built $OUT"
|
|
python3 -c "import zipfile; zf=zipfile.ZipFile('$OUT'); print('\n'.join(zf.namelist()))"
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: projects-portfolio-${{ github.ref_name }}
|
|
path: dist/projects-portfolio-*.zip
|
|
if-no-files-found: error
|
|
|
|
- name: Create release
|
|
env:
|
|
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
|
|
REPO: ${{ github.repository }}
|
|
TAG: ${{ github.ref_name }}
|
|
run: |
|
|
set -euo pipefail
|
|
if [ -z "${GITEA_TOKEN:-}" ]; then
|
|
echo "::error::GITEA_TOKEN secret is not set. Create a personal access token in Gitea with 'write:repository' scope and add it as a repository secret named GITEA_TOKEN." >&2
|
|
exit 1
|
|
fi
|
|
|
|
API="https://git.keithsolomon.net/api/v1"
|
|
|
|
# Build the JSON payload with python (no jq dependency).
|
|
payload=$(TAG="$TAG" python3 -c '
|
|
import json, os, sys
|
|
tag = os.environ["TAG"]
|
|
body = (
|
|
"Automated release.\n\n"
|
|
"Built from commit " + os.environ.get("GITHUB_SHA", "unknown") + ".\n\n"
|
|
"See the workflow run for the artifact."
|
|
)
|
|
print(json.dumps({
|
|
"tag_name": tag,
|
|
"name": tag,
|
|
"body": body,
|
|
"draft": False,
|
|
"prerelease": False,
|
|
}))
|
|
')
|
|
|
|
# 1. Create the release (Gitea doesn't auto-generate notes).
|
|
release_json=$(curl -fsS -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload" \
|
|
"${API}/repos/${REPO}/releases")
|
|
|
|
# 2. Extract the release id (Gitea returns the full release object).
|
|
release_id=$(TAG="$TAG" python3 -c '
|
|
import json, sys
|
|
data = json.loads(sys.stdin.read())
|
|
print(data.get("id", ""))
|
|
' <<<"$release_json")
|
|
|
|
if [ -z "$release_id" ]; then
|
|
echo "::error::Failed to create release. Response: $release_json" >&2
|
|
exit 1
|
|
fi
|
|
echo "Created release id=$release_id"
|
|
|
|
# 3. Upload the zip as a release asset.
|
|
zip_path=( dist/projects-portfolio-*.zip )
|
|
zip_path="${zip_path[0]}"
|
|
curl -fsS -X POST \
|
|
-H "Authorization: token ${GITEA_TOKEN}" \
|
|
-H "Content-Type: application/zip" \
|
|
--data-binary "@${zip_path}" \
|
|
"${API}/repos/${REPO}/releases/${release_id}/assets?name=$(basename "$zip_path")"
|
|
echo "Uploaded asset: $(basename "$zip_path")"
|