* refactor(auth): replace dashboard sessions with stateless tokens * feat(auth): harden session issuance and distributed enforcement * fix(proxy): preserve trusted proxy compatibility defaults * refactor: address dashboard auth review feedback * refactor: remove classic frontend and flatten web app
157 lines
4.9 KiB
YAML
157 lines
4.9 KiB
YAML
name: Release (Linux, macOS, Windows)
|
|
permissions:
|
|
contents: write
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
name:
|
|
description: 'reason'
|
|
required: false
|
|
push:
|
|
tags:
|
|
- '*'
|
|
- '!*-alpha*'
|
|
|
|
jobs:
|
|
linux:
|
|
name: Linux Release
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Determine Version
|
|
run: |
|
|
VERSION=$(git describe --tags)
|
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
- uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
|
|
with:
|
|
bun-version: latest
|
|
- name: Build Frontend
|
|
env:
|
|
CI: ""
|
|
run: |
|
|
cd web
|
|
bun install --frozen-lockfile
|
|
DISABLE_ESLINT_PLUGIN='true' VITE_REACT_APP_VERSION=$VERSION bun run build
|
|
cd ..
|
|
- name: Set up Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: '>=1.25.1'
|
|
- name: Build Backend (amd64)
|
|
run: |
|
|
go mod download
|
|
go build -ldflags "-s -w -X 'new-api/common.Version=$VERSION' -extldflags '-static'" -o new-api-$VERSION
|
|
- name: Build Backend (arm64)
|
|
run: |
|
|
sudo apt-get update
|
|
DEBIAN_FRONTEND=noninteractive sudo apt-get install -y gcc-aarch64-linux-gnu
|
|
CC=aarch64-linux-gnu-gcc CGO_ENABLED=1 GOOS=linux GOARCH=arm64 go build -ldflags "-s -w -X 'new-api/common.Version=$VERSION' -extldflags '-static'" -o new-api-arm64-$VERSION
|
|
- name: Generate checksums
|
|
run: sha256sum new-api-* > checksums-linux.txt
|
|
|
|
- name: Release
|
|
uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
with:
|
|
files: |
|
|
new-api-*
|
|
checksums-linux.txt
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
macos:
|
|
name: macOS Release
|
|
runs-on: macos-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Determine Version
|
|
run: |
|
|
VERSION=$(git describe --tags)
|
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
- uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
|
|
with:
|
|
bun-version: latest
|
|
- name: Build Frontend
|
|
env:
|
|
CI: ""
|
|
NODE_OPTIONS: "--max-old-space-size=4096"
|
|
run: |
|
|
cd web
|
|
bun install --frozen-lockfile
|
|
DISABLE_ESLINT_PLUGIN='true' VITE_REACT_APP_VERSION=$VERSION bun run build
|
|
cd ..
|
|
- name: Set up Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: '>=1.25.1'
|
|
- name: Build Backend
|
|
run: |
|
|
go mod download
|
|
go build -ldflags "-X 'new-api/common.Version=$VERSION'" -o new-api-macos-$VERSION
|
|
- name: Generate checksums
|
|
run: shasum -a 256 new-api-macos-* > checksums-macos.txt
|
|
|
|
- name: Release
|
|
uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
with:
|
|
files: |
|
|
new-api-macos-*
|
|
checksums-macos.txt
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
windows:
|
|
name: Windows Release
|
|
runs-on: windows-latest
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Determine Version
|
|
run: |
|
|
VERSION=$(git describe --tags)
|
|
echo "VERSION=$VERSION" >> $GITHUB_ENV
|
|
- uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
|
|
with:
|
|
bun-version: latest
|
|
- name: Build Frontend
|
|
env:
|
|
CI: ""
|
|
run: |
|
|
cd web
|
|
bun install --frozen-lockfile
|
|
DISABLE_ESLINT_PLUGIN='true' VITE_REACT_APP_VERSION=$VERSION bun run build
|
|
cd ..
|
|
- name: Set up Go
|
|
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
|
|
with:
|
|
go-version: '>=1.25.1'
|
|
- name: Build Backend
|
|
run: |
|
|
go mod download
|
|
go build -ldflags "-s -w -X 'new-api/common.Version=$VERSION'" -o new-api-$VERSION.exe
|
|
- name: Generate checksums
|
|
run: sha256sum new-api-*.exe > checksums-windows.txt
|
|
|
|
- name: Release
|
|
uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
with:
|
|
files: |
|
|
new-api-*.exe
|
|
checksums-windows.txt
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|