em_proxy/.github/workflows/ci.yml at develop · SideStore/em_proxy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
name: CI

on:
  push:
    branches: [develop, main, master]
    tags: ["v*.*.*"]
  pull_request:
  workflow_dispatch:

jobs:
  macos:
    name: macOS Build
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: "true"

      - name: Install just
        run: |
          brew install just

      - name: Cache Cargo
        uses: actions/cache@v4
        with:
          path: |
            ~/.cargo/registry
            ~/.cargo/git
            target
          key: macos-cargo-${{ hashFiles('**/Cargo.lock', 'justfile') }}
          restore-keys: macos-cargo-

      - name: Install rustup targets
        run: |
          rustup target add aarch64-apple-ios && \
          rustup target add aarch64-apple-ios-sim && \
          rustup target add aarch64-apple-darwin

      - name: Build XCFramework
        run: |
          just xcframework

      - name: Package XCFramework bundle
        shell: bash
        run: |
          (cd libs && zip -r ../EMProxy.xcframework.zip EMProxy.xcframework)
          openssl dgst -sha256 EMProxy.xcframework.zip

      - name: Upload XCFramework artifact
        uses: actions/upload-artifact@v4
        with:
          name: em_proxy-xcframework
          path: EMProxy.xcframework.zip

  release:
    name: Release
    if: startsWith(github.ref, 'refs/tags/v')
    needs:
      - macos
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Validate release update policy
        shell: bash
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          set -euo pipefail
          pushed_tag="${GITHUB_REF_NAME}"
          echo "Pushed tag: ${pushed_tag}"

          latest_release_tag=$(gh release list --repo "${GITHUB_REPOSITORY}" --limit 1 --json tagName -q '.[0].tagName' 2>/dev/null || echo "")
          echo "Latest release tag on GitHub: ${latest_release_tag}"

          if gh release view "${pushed_tag}" --repo "${GITHUB_REPOSITORY}" >/dev/null 2>&1; then
            echo "Release for tag '${pushed_tag}' already exists on GitHub."
            if [[ -n "${latest_release_tag}" && "${pushed_tag}" != "${latest_release_tag}" ]]; then
              echo "::error::Correcting previous releases (other than last release) is disallowed (pushed: '${pushed_tag}', latest release: '${latest_release_tag}')."
              exit 1
            else
              echo "Pushed tag matches the latest release tag. Update allowed."
            fi
          else
            echo "Release for tag '${pushed_tag}' does not exist yet. New release creation allowed."
          fi

      - name: Download XCFramework artifact
        uses: actions/download-artifact@v4
        with:
          name: em_proxy-xcframework
          path: artifacts/em_proxy-xcframework

      - name: Package release archives
        shell: bash
        run: |
          set -euo pipefail
          mkdir -p release
          tag="${GITHUB_REF_NAME}"
          cp artifacts/em_proxy-xcframework/EMProxy.xcframework.zip "release/EMProxy.xcframework.zip"
          (cd release && sha256sum "EMProxy.xcframework.zip" > "EMProxy.xcframework.zip.sha256")
          ls -la release

      - name: Create or Update GitHub release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          target_commitish: ${{ github.sha }}
          files: release/*
          fail_on_unmatched_files: true
          generate_release_notes: true
          make_latest: true