core/.github/workflows/dev-release.yml at 610f99c8cc135f82ee7e76c85a1787492f836bb4 · lando/core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
name: Create Dev Releases

on:
  push:
    branches:
      - main
      - edge
      - 'preview-**'

jobs:
  package:
    uses: ./.github/workflows/pkg-binary.yml
    strategy:
      fail-fast: false
      matrix:
        arch:
          - x64
          - arm64
        os:
          - linux
          - macos
          - win

    with:
      arch: ${{ matrix.arch }}
      edge: true
      filename: lando-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }}
      node-version: "20"
      os: ${{ matrix.os }}
      version: dev

  sign:
    uses: ./.github/workflows/sign-binary.yml
    needs:
      - package
    strategy:
      fail-fast: false
      matrix:
        file:
          - lando-linux-arm64-${{ github.sha }}
          - lando-macos-arm64-${{ github.sha }}
          - lando-win-arm64-${{ github.sha }}

          - lando-linux-x64-${{ github.sha }}
          - lando-macos-x64-${{ github.sha }}
          - lando-win-x64-${{ github.sha }}

    with:
      download-pattern: packaged-lando-*
      file: ${{ matrix.file }}
    secrets:
      apple-notary-user: ${{ secrets.APPLE_NOTARY_USER }}
      apple-notary-password: ${{ secrets.APPLE_NOTARY_PASSWORD }}
      certificate-data: ${{ contains(matrix.file, 'macos') && secrets.APPLE_CERT_DATA || secrets.KEYLOCKER_CLIENT_CERT }}
      certificate-password: ${{ contains(matrix.file, 'macos') && secrets.APPLE_CERT_PASSWORD || secrets.KEYLOCKER_CLIENT_CERT_PASSWORD }}
      keylocker-api-key: ${{ secrets.KEYLOCKER_API_KEY }}
      keylocker-cert-sha1-hash: ${{ secrets.KEYLOCKER_CERT_SHA1_HASH }}
      keylocker-keypair-alias: ${{ secrets.KEYLOCKER_KEYPAIR_ALIAS }}

  build-release-binary-alias:
    uses: ./.github/workflows/release-rename-binary.yml
    needs:
      - sign
    strategy:
      fail-fast: false
      matrix:
        arch:
          - x64
          - arm64
        os:
          - linux
          - macos
          - win
        alias:
          - dev
          - latest
    with:
      source: lando-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }}
      destination: lando-${{ matrix.os }}-${{ matrix.arch }}-${{ matrix.alias }}
      download-pattern: signed-lando-*
  build-release-binary-branch:
    uses: ./.github/workflows/release-rename-binary.yml
    needs:
      - sign
    strategy:
      fail-fast: false
      matrix:
        arch:
          - x64
          - arm64
        os:
          - linux
          - macos
          - win

    with:
      source: lando-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }}
      destination: lando-${{ matrix.os }}-${{ matrix.arch }}-${{ github.head_ref || github.ref_name }}
      download-pattern: signed-lando-*

  checksum:
    uses: ./.github/workflows/generate-checksums.yml
    strategy:
      fail-fast: false
      matrix:
        alias:
          - dev
          - ${{ github.sha }}
    needs:
      - build-release-binary-alias
      - build-release-binary-branch
    with:
      download-pattern: release-*
      flatten: true
      output: sha256sum-${{ matrix.alias }}.txt
      show: true
      upload-name: release-checksums-${{ matrix.alias }}

  deploy-releases-s3:
    uses: ./.github/workflows/deploy-s3.yml
    needs:
      - checksum
    with:
      download-pattern: release-*
    secrets:
      aws-secret-access-key: ${{ secrets.S3_SECRET_ACCESS_KEY }}
      aws-access-key-id: ${{ secrets.S3_ACCESS_KEY_ID }}
      aws-region: us-east-1
  deploy-releases-artifacts:
    uses: ./.github/workflows/deploy-artifacts.yml
    needs:
      - checksum
    with:
      download-pattern: release-*