RobotStudio/.github/workflows/release.yml at main · offsideAI/RobotStudio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# Release builds (E5.S4): triggered by a v* tag or by hand. Produces
# .dmg/.app (macOS), .msi/.exe (Windows), .deb/.AppImage (Linux) and
# attaches them to a draft GitHub release.
#
# macOS signing + notarization (risk R8) activates only when the Apple
# Developer secrets exist — provisioning them is Arunabh's launch task
# (docs/milestones/M5.md launch checklist):
#   APPLE_CERTIFICATE          base64 .p12 (Developer ID Application)
#   APPLE_CERTIFICATE_PASSWORD
#   APPLE_SIGNING_IDENTITY     e.g. "Developer ID Application: … (TEAMID)"
#   APPLE_ID / APPLE_PASSWORD / APPLE_TEAM_ID   (notarytool)
# Without them the macOS artifact is unsigned (fine for design partners
# who right-click-open; not for public distribution).

name: Release

on:
  push:
    tags: ["v*"]
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always

jobs:
  build:
    name: bundle (${{ matrix.os }})
    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, ubuntu-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v4
      - name: Install Linux system dependencies (Tauri)
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev \
            librsvg2-dev patchelf libgtk-3-dev
      - name: Install toolchain
        run: rustup show
      - uses: Swatinem/rust-cache@v2
      - uses: pnpm/action-setup@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm
      - name: Install JS dependencies
        run: pnpm install --frozen-lockfile
      - name: Guard the product name seam
        run: bash scripts/check-product-name.sh
        shell: bash
      - name: Build bundles
        uses: tauri-apps/tauri-action@v0
        env:
          # Signing activates only when the secrets are provisioned.
          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
        with:
          projectPath: apps/desktop/src-tauri
          tagName: ${{ github.ref_name }}
          releaseName: "RobotStudio ${{ github.ref_name }}"
          releaseDraft: true
          prerelease: ${{ contains(github.ref_name, '-m') }}