Gotcha/.gitea/workflows/release.yml

name: Tagged release

on:
  push:
    tags:
      - "*"

env:
  CARGO_TERM_COLOR: always

jobs:
  prepare-release:
    runs-on: linux-arm64
    outputs:
      release_id: ${{ steps.release.outputs.release_id }}
    steps:
      - name: Check out the tag
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Test release handling
        run: python3 .gitea/scripts/release.py test

      - name: Create draft release
        id: release
        env:
          GITEA_API_URL: ${{ gitea.server_url }}/api/v1
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_SERVER_URL: ${{ gitea.server_url }}
          GITEA_SHA: ${{ gitea.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: python3 .gitea/scripts/release.py prepare

  build-unix:
    needs: prepare-release
    runs-on: linux-arm64
    container: ghcr.io/rust-cross/cargo-zigbuild@sha256:82af75c41958c2af2787e8bedd912da7678a9438937e223e9d83d006d747b38b
    steps:
      - name: Check out the exact tag
        env:
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_SERVER_URL: ${{ gitea.server_url }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: |
          set -eu
          git init
          git -c http.extraHeader="Authorization: token $GITEA_TOKEN" fetch --depth=1 \
            "$GITEA_SERVER_URL/$GITEA_REPOSITORY.git" "refs/tags/$GITEA_REF_NAME"
          git checkout --detach FETCH_HEAD

      - name: Build, verify, package, and upload Darwin and Linux binaries
        env:
          GITEA_API_URL: ${{ gitea.server_url }}/api/v1
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          RELEASE_ID: ${{ needs.prepare-release.outputs.release_id }}
        run: |
          set -eu
          version=$(printf '%s' "$GITEA_REF_NAME" | sed 's/[^A-Za-z0-9._-]/-/g')
          for build in \
            'aarch64-apple-darwin|aarch64-apple-darwin|darwin-arm64|cffaedfe' \
            'x86_64-apple-darwin|x86_64-apple-darwin|darwin-x64|cffaedfe' \
            'aarch64-unknown-linux-gnu|aarch64-unknown-linux-gnu.2.28|linux-arm64|7f454c46' \
            'x86_64-unknown-linux-gnu|x86_64-unknown-linux-gnu.2.28|linux-x64|7f454c46'
          do
            target=${build%%|*}
            rest=${build#*|}
            build_target=${rest%%|*}
            rest=${rest#*|}
            platform=${rest%%|*}
            magic=${rest#*|}
            cargo zigbuild --release --locked --target "$build_target" \
              --package gotcha-cli --package gotcha-tui

            release="target/$target/release"
            for binary in gotcha gotcha-tui; do
              test -s "$release/$binary"
              actual=$(od -An -tx1 -N4 "$release/$binary" | tr -d ' \n')
              test "$actual" = "$magic"
            done

            package="gotcha-${version}-${platform}"
            mkdir -p "dist/$package"
            cp "$release/gotcha" "$release/gotcha-tui" "dist/$package/"
            tar -C dist -czf "dist/${package}.tar.gz" "$package"
            test "$(tar -tzf "dist/${package}.tar.gz" | wc -l)" -eq 3
            rm -r "dist/$package"

            asset="dist/${package}.tar.gz"
            name=$(basename "$asset")
            curl --fail --silent --show-error --retry 3 \
              -H "Authorization: token $GITEA_TOKEN" \
              -H "Content-Type: application/octet-stream" \
              --data-binary "@$asset" \
              "$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases/$RELEASE_ID/assets?name=$name"
          done

  build-windows:
    needs:
      - prepare-release
      - build-unix
    runs-on: linux-arm64
    container: messense/cargo-xwin@sha256:4696dd4e79edf8569fa99c4b06bd99273e0501c7adc983aa61d57945f795bef0
    steps:
      - name: Check out the exact tag
        env:
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_SERVER_URL: ${{ gitea.server_url }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: |
          set -eu
          git init
          git -c http.extraHeader="Authorization: token $GITEA_TOKEN" fetch --depth=1 \
            "$GITEA_SERVER_URL/$GITEA_REPOSITORY.git" "refs/tags/$GITEA_REF_NAME"
          git checkout --detach FETCH_HEAD

      - name: Install the repository Rust toolchain
        run: rustup toolchain install 1.92.0 --profile minimal --target x86_64-pc-windows-msvc

      - name: Cross-build release binaries
        run: >-
          cargo +1.92.0 xwin build --release --locked
          --target x86_64-pc-windows-msvc
          --package gotcha-cli --package gotcha-tui

      - name: Verify, package, and upload Windows binaries
        env:
          GITEA_API_URL: ${{ gitea.server_url }}/api/v1
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          RELEASE_ID: ${{ needs.prepare-release.outputs.release_id }}
        run: |
          set -eu
          version=$(printf '%s' "$GITEA_REF_NAME" | sed 's/[^A-Za-z0-9._-]/-/g')
          release=target/x86_64-pc-windows-msvc/release
          for binary in gotcha.exe gotcha-tui.exe; do
            test -s "$release/$binary"
            test "$(od -An -tx1 -N2 "$release/$binary" | tr -d ' \n')" = "4d5a"
          done

          package="gotcha-${version}-windows-x64"
          mkdir -p "dist/$package"
          cp "$release/gotcha.exe" "$release/gotcha-tui.exe" "dist/$package/"
          tar -C dist -czf "dist/${package}.tar.gz" "$package"
          test "$(tar -tzf "dist/${package}.tar.gz" | wc -l)" -eq 3
          rm -r "dist/$package"

          asset="dist/${package}.tar.gz"
          name=$(basename "$asset")
          curl --fail --silent --show-error --retry 3 \
            -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/octet-stream" \
            --data-binary "@$asset" \
            "$GITEA_API_URL/repos/$GITEA_REPOSITORY/releases/$RELEASE_ID/assets?name=$name"

  publish-release:
    needs:
      - prepare-release
      - build-unix
      - build-windows
    runs-on: linux-arm64
    steps:
      - name: Check out the tag
        uses: actions/checkout@v4

      - name: Verify the asset manifest and publish the release
        env:
          GITEA_API_URL: ${{ gitea.server_url }}/api/v1
          GITEA_REF_NAME: ${{ gitea.ref_name }}
          GITEA_REPOSITORY: ${{ gitea.repository }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          RELEASE_ID: ${{ needs.prepare-release.outputs.release_id }}
        run: python3 .gitea/scripts/release.py publish