Bump version after merge into release #90
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Package with Briefcase and Create Release | |
| on: | |
| push: | |
| branches: | |
| - release | |
| jobs: | |
| package: | |
| runs-on: macos-latest | |
| env: | |
| KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }} | |
| RELEASE_MESSAGE: | | |
| First release, will have issues. | |
| ** After entering your password it will take a few minutes (maybe ten). It will appear to be doing nothing. If it fails, it should pop up with an error. Otherwise it should install all the dependences in the background and eventually pop up the GUI. | |
| If you run the binary with any arguments, it will work like the previous terminal app. '/Applications/Blu-ray to AVP.app/Contents/MacOS/Blu-ray to AVP' | |
| EXCLUDED_MESSAGES: | | |
| Bump version after merge into release | |
| merge master into release | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.12' | |
| - name: Install Poetry | |
| run: | | |
| curl -sSL https://install.python-poetry.org | python3 - | |
| echo "$HOME/.poetry/bin" >> $GITHUB_PATH | |
| - name: Install dependencies | |
| run: | | |
| poetry install --no-interaction | |
| - name: Install certificates | |
| run: | | |
| KEYCHAIN_PATH=$(pwd)/build.keychain | |
| security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
| security default-keychain -s $KEYCHAIN_PATH | |
| security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
| # Import both certificates | |
| echo "${{ secrets.CERTIFICATE }}" | base64 --decode > app_certificate.p12 | |
| echo "${{ secrets.CERTIFICATE_INSTALLER }}" | base64 --decode > installer_certificate.p12 | |
| security import app_certificate.p12 -k $KEYCHAIN_PATH -P $CERTIFICATE_PASSWORD -A -T "/usr/bin/codesign" -T "/usr/bin/productsign" | |
| security import installer_certificate.p12 -k $KEYCHAIN_PATH -P $CERTIFICATE_PASSWORD -A -T "/usr/bin/codesign" -T "/usr/bin/productsign" | |
| security set-key-partition-list -S apple-tool:,apple:,codesign:,productsign: -s -k $KEYCHAIN_PATH | |
| - name: Store Notarization Credentials | |
| run: | | |
| echo "${{ secrets.KEYCHAIN_PASSWORD }}" | xcrun altool --store-password-in-keychain-item "${{ secrets.KEYCHAIN_NAME }}" -u "${{ secrets.APPLE_ID }}" -p - | |
| xcrun notarytool store-credentials "${{ secrets.KEYCHAIN_NAME }}" --apple-id "${{ secrets.APPLE_ID }}" --password "${{ secrets.KEYCHAIN_PASSWORD }}" --team-id "${{ secrets.TEAM_ID }}" | |
| - name: Extract version | |
| id: extract_version | |
| run: | | |
| version=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml | head -n 1 | tr -d '"' | xargs) | |
| echo "Extracted version: '${version}'" | |
| echo "VERSION=${version}" >> $GITHUB_ENV | |
| - name: Package application for GitHub | |
| run: | | |
| poetry run briefcase create | |
| poetry run briefcase build | |
| find . -name QtWebEngineCore.framework -type d | while read dir; do | |
| find "$dir" -type f -execdir codesign --force --verify --verbose --sign "${{ secrets.DEV_ID }}" {} \; | |
| done | |
| poetry run briefcase package -i "${{ secrets.DEV_ID }}" | |
| - name: Get commit messages | |
| run: | | |
| EXCLUDED_PATTERNS=$(echo "${{ env.EXCLUDED_MESSAGES }}" | tr '\n' '|' | sed 's/|$//') | |
| MESSAGES=$(git log --pretty=format:"- [%h](https://github.com/${{ github.repository }}/commit/%H) %s" master ^release | grep -vE "$EXCLUDED_PATTERNS" | awk '!seen[$0]++') | |
| FORMATTED_MESSAGES=$(echo "$MESSAGES" | jq -Rs '.') | |
| echo "messages=$FORMATTED_MESSAGES" >> $GITHUB_OUTPUT | |
| echo "FORMATTED_MESSAGES" | |
| - name: Prepare Release Message | |
| id: prepare_release_message | |
| run: | | |
| RELEASE_BODY=$(cat <<EOF | |
| ${{ env.RELEASE_MESSAGE }} | |
| ${{ steps.get_commit_messages.outputs.messages }} | |
| EOF | |
| ) | |
| echo "release_body=$(echo "$RELEASE_BODY" | jq -R -s '.')" >> $GITHUB_OUTPUT | |
| - name: Create Release | |
| id: create_release | |
| uses: softprops/action-gh-release@v2 | |
| with: | |
| body: ${{ steps.prepare_release_message.outputs.release_body }} | |
| draft: false | |
| prerelease: true | |
| tag_name: v${{ env.VERSION }} | |
| name: Release v${{ env.VERSION }} | |
| files: | | |
| dist/*.zip | |
| dist/*.dmg | |
| dist/*.pkg | |