mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-06-16 23:14:13 +00:00
Workflow hardening based on the four-cycle release-debugging session:
Centralized versioning
- Add /VERSION at repo root as single source of truth.
- core/Makefile reads VERSION via `$(shell cat ../VERSION)`.
- Add `make bump VER=X.Y.Z` target that updates /VERSION and syncs
sdk/package.json in one shot.
Version mismatch guards
- All three release workflows (release.yaml, release-apt.yml,
publish-sdk.yml) now verify the release tag matches /VERSION at the
very first step. Stale-VERSION releases fail fast with a clear hint
to run `make bump`.
GoReleaser v2 migration
- Upgrade goreleaser-action v5 -> v6 (pinned `~> v2`).
- Add `version: 2` to .goreleaser.yaml.
- Migrate to v2 syntax: `archives.format` -> `formats: [...]`,
`brews.folder` -> `directory`, `snapshot.name_template` ->
`version_template`, `builds`-style references replaced with `ids:`.
- `before.hooks` can use map syntax again (v2 supports it).
Homebrew tap on stable only
- `brews.skip_upload` is now `'{{ if .Prerelease }}true{{ else }}false{{ end }}'`.
- Stops nightly releases from polluting the tap and from hitting 401
on stale HOMEBREW_TAP_TOKEN. Stable main releases still publish.
CI on every push
- New ci.yml runs `go vet` + `go test -race` on the core module and
typecheck/build/unit-tests on the SDK for every push to main/nightly
and every PR. version-sanity job warns when /VERSION and
sdk/package.json drift.
Version bump for next pipeline test
- /VERSION: 0.122.8
- sdk/package.json: 0.122.8
82 lines
2.1 KiB
YAML
82 lines
2.1 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
|
|
jobs:
|
|
build-release:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0 # Need full history for changelog
|
|
|
|
- name: Verify VERSION file matches release tag
|
|
run: |
|
|
TAG="${GITHUB_REF_NAME}"
|
|
EXPECTED="${TAG#v}"
|
|
EXPECTED="${EXPECTED%-nightly}"
|
|
ACTUAL=$(tr -d '[:space:]' < VERSION)
|
|
if [ "$EXPECTED" != "$ACTUAL" ]; then
|
|
echo "::error::Tag $TAG implies version '$EXPECTED' but /VERSION says '$ACTUAL'."
|
|
echo "::error::Run 'make -C core bump VER=$EXPECTED' and commit before tagging."
|
|
exit 1
|
|
fi
|
|
echo "VERSION file matches tag: $ACTUAL"
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: '1.24'
|
|
cache-dependency-path: core/go.sum
|
|
|
|
- name: Run GoReleaser
|
|
uses: goreleaser/goreleaser-action@v6
|
|
with:
|
|
distribution: goreleaser
|
|
version: '~> v2'
|
|
args: release --clean
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: release-artifacts
|
|
path: dist/
|
|
retention-days: 5
|
|
|
|
# Verify release artifacts
|
|
verify-release:
|
|
runs-on: ubuntu-latest
|
|
needs: build-release
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
|
|
steps:
|
|
- name: Download artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: release-artifacts
|
|
path: dist/
|
|
|
|
- name: List release artifacts
|
|
run: |
|
|
echo "=== Release Artifacts ==="
|
|
ls -la dist/
|
|
echo ""
|
|
echo "=== .deb packages ==="
|
|
ls -la dist/*.deb 2>/dev/null || echo "No .deb files found"
|
|
echo ""
|
|
echo "=== Archives ==="
|
|
ls -la dist/*.tar.gz 2>/dev/null || echo "No .tar.gz files found"
|