Bump version after merge into release #93
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Package with Briefcase and Create Release | |
| on: | |
| push: | |
| branches: | |
| - release | |
| jobs: | |
| package: | |
| runs-on: macos-latest | |
| env: | |
| KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }} | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }} | |
| RELEASE_MESSAGE: | | |
| First release, will have issues. | |
| ** After entering your password it will take a few minutes (maybe ten). It will appear to be doing nothing. If it fails, it should pop up with an error. Otherwise it should install all the dependences in the background and eventually pop up the GUI. | |
| Reading directly from discs has not yet been added to the GUI, but works in the terminal version. If you run the binary with any arguments, it will work like the previous terminal app. "/Applications/Blu-ray to AVP.app/Contents/MacOS/Blu-ray to AVP" | |
| EXCLUDED_MESSAGES: | | |
| Bump version after merge into release | |
| merge master into release | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Fetch master branch | |
| run: git fetch origin master:master | |
| - name: Get commit messages | |
| id: get_commit_messages | |
| run: | | |
| MESSAGES=$(git log --pretty=format:"- [%h](https://github.com/${{ github.repository }}/commit/%H) %s" master ^release | grep -vE "$(echo "$EXCLUDED_MESSAGES" | tr '\n' '|')" | awk '!seen[$0]++') | |
| # MESSAGES=$(git log --pretty=format:"- [%h](https://github.com/${{ github.repository }}/commit/%H) %s" master ^release | grep -vE "$EXCLUDED_PATTERNS" | awk '!seen[$0]++') | |
| echo "MESSAGES=$MESSAGES" >> $GITHUB_ENV | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.12' | |
| - name: Install Poetry | |
| run: | | |
| curl -sSL https://install.python-poetry.org | python3 - | |
| echo "$HOME/.poetry/bin" >> $GITHUB_PATH | |
| - name: Install dependencies | |
| run: | | |
| poetry install --no-interaction | |
| - name: Install certificates | |
| run: | | |
| KEYCHAIN_PATH=$(pwd)/build.keychain | |
| security create-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
| security default-keychain -s $KEYCHAIN_PATH | |
| security unlock-keychain -p $KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
| # Import both certificates | |
| echo "${{ secrets.CERTIFICATE }}" | base64 --decode > app_certificate.p12 | |
| echo "${{ secrets.CERTIFICATE_INSTALLER }}" | base64 --decode > installer_certificate.p12 | |
| security import app_certificate.p12 -k $KEYCHAIN_PATH -P $CERTIFICATE_PASSWORD -A -T "/usr/bin/codesign" -T "/usr/bin/productsign" | |
| security import installer_certificate.p12 -k $KEYCHAIN_PATH -P $CERTIFICATE_PASSWORD -A -T "/usr/bin/codesign" -T "/usr/bin/productsign" | |
| security set-key-partition-list -S apple-tool:,apple:,codesign:,productsign: -s -k $KEYCHAIN_PATH | |
| - name: Store Notarization Credentials | |
| run: | | |
| echo "${{ secrets.KEYCHAIN_PASSWORD }}" | xcrun altool --store-password-in-keychain-item "${{ secrets.KEYCHAIN_NAME }}" -u "${{ secrets.APPLE_ID }}" -p - | |
| xcrun notarytool store-credentials "${{ secrets.KEYCHAIN_NAME }}" --apple-id "${{ secrets.APPLE_ID }}" --password "${{ secrets.KEYCHAIN_PASSWORD }}" --team-id "${{ secrets.TEAM_ID }}" | |
| - name: Extract version | |
| id: extract_version | |
| run: | | |
| version=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml | head -n 1 | tr -d '"' | xargs) | |
| echo "Extracted version: '${version}'" | |
| echo "VERSION=${version}" >> $GITHUB_ENV | |
| - name: Package application for GitHub | |
| run: | | |
| poetry run briefcase create | |
| poetry run briefcase build | |
| find . -name QtWebEngineCore.framework -type d | while read dir; do | |
| find "$dir" -type f -execdir codesign --force --verify --verbose --sign "${{ secrets.DEV_ID }}" {} \; | |
| done | |
| poetry run briefcase package -i "${{ secrets.DEV_ID }}" | |
| - name: Create Release | |
| id: create_release | |
| uses: softprops/action-gh-release@v2 | |
| with: | |
| body: | | |
| ${{ env.RELEASE_MESSAGE }} | |
| ${{ env.MESSAGES }} | |
| draft: false | |
| prerelease: true | |
| tag_name: v${{ env.VERSION }} | |
| name: Release v${{ env.VERSION }} | |
| files: | | |
| dist/*.zip | |
| dist/*.dmg | |
| dist/*.pkg | |