name: Release
on:
push:
tags:
- 'v[0-9]*.[0-9]*.[0-9]*'
workflow_dispatch:
inputs:
dry_run:
description: 'Dry run mode (skip actual publishing)'
required: false
default: true
type: boolean
skip_crates_io:
description: 'Skip publishing to crates.io (if already published)'
required: false
default: false
type: boolean
skip_pypi:
description: 'Skip publishing to PyPI (if already published)'
required: false
default: false
type: boolean
permissions:
contents: write
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
jobs:
test:
name: Run tests
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- name: Verify Cargo.lock is up to date
run: cargo check --locked
- name: Run tests
run: make test
build:
name: Build ${{ matrix.target }}
needs: test
strategy:
matrix:
include:
- os: ubuntu-latest
target: x86_64-unknown-linux-gnu
- os: ubuntu-latest
target: aarch64-unknown-linux-gnu
- os: windows-latest
target: x86_64-pc-windows-msvc
- os: macos-latest
target: x86_64-apple-darwin
- os: macos-latest
target: aarch64-apple-darwin
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
targets: ${{ matrix.target }}
- name: Install cross-compilation tools
if: matrix.target == 'aarch64-unknown-linux-gnu'
run: sudo apt-get update && sudo apt-get install -y gcc-aarch64-linux-gnu
- name: Install maturin
run: pip install maturin
- name: Build wheel
shell: bash
run: |
case "${{ matrix.target }}" in
*-gnu)
pip install ziglang
maturin build --release --target ${{ matrix.target }} --compatibility manylinux_2_28 --zig
;;
*)
maturin build --release --target ${{ matrix.target }}
;;
esac
- name: Build binary
env:
CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
run: cargo build --release --target ${{ matrix.target }}
- name: Verify binary
if: ${{ !contains(matrix.target, 'aarch64-unknown-linux') }}
shell: bash
run: |
if [[ "${{ runner.os }}" == "Windows" ]]; then
./target/${{ matrix.target }}/release/unifi-cli.exe --version
else
./target/${{ matrix.target }}/release/unifi-cli --version
fi
- name: Create release archive
shell: bash
run: |
VERSION=${GITHUB_REF#refs/tags/}
ARCHIVE_NAME="unifi-cli-${VERSION}-${{ matrix.target }}"
mkdir -p release-package
if [[ "${{ runner.os }}" == "Windows" ]]; then
cp "target/${{ matrix.target }}/release/unifi-cli.exe" release-package/unifi-cli.exe
cd release-package
powershell -command "Compress-Archive -Path unifi-cli.exe -DestinationPath ../${ARCHIVE_NAME}.zip"
cd ..
powershell -command "Get-FileHash -Path '${ARCHIVE_NAME}.zip' -Algorithm SHA256 | Select-Object -ExpandProperty Hash" > "${ARCHIVE_NAME}.zip.sha256"
else
cp "target/${{ matrix.target }}/release/unifi-cli" release-package/unifi-cli
tar -czf "${ARCHIVE_NAME}.tar.gz" -C release-package unifi-cli
if [[ "${{ runner.os }}" == "macOS" ]]; then
shasum -a 256 "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
else
sha256sum "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
fi
fi
rm -rf release-package
- name: Upload wheel
uses: actions/upload-artifact@v4
with:
path: target/wheels/*
name: wheel-${{ matrix.target }}
- name: Upload release archives
uses: actions/upload-artifact@v4
with:
path: |
unifi-cli-*-${{ matrix.target }}.tar.gz*
unifi-cli-*-${{ matrix.target }}.zip*
name: release-${{ matrix.target }}
sdist:
name: Build source distribution
runs-on: ubuntu-latest
needs: test
steps:
- uses: actions/checkout@v4
- name: Install maturin
run: pip install maturin
- name: Build sdist
run: maturin sdist
- uses: actions/upload-artifact@v4
with:
path: target/wheels/*.tar.gz
name: sdist
release:
runs-on: ubuntu-latest
needs: [build, sdist]
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- name: Install uv
uses: astral-sh/setup-uv@v5
with:
enable-cache: false
- name: Publish to crates.io
if: ${{ inputs.dry_run != true && inputs.skip_crates_io != true }}
env:
CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
run: cargo publish --locked
- name: Test crates.io publish (dry run)
if: ${{ inputs.dry_run == true && inputs.skip_crates_io != true }}
run: |
echo "DRY RUN: Would publish to crates.io"
cargo publish --dry-run --locked
- name: Skip crates.io publishing
if: ${{ inputs.skip_crates_io == true }}
run: echo "Skipping crates.io publishing as requested"
- name: Download all artifacts
uses: actions/download-artifact@v4
with:
path: artifacts
- name: Publish to PyPI
if: ${{ inputs.dry_run != true && inputs.skip_pypi != true }}
env:
TWINE_USERNAME: __token__
TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
run: |
uv tool run twine upload artifacts/wheel-*/*.whl artifacts/sdist/*.tar.gz
- name: Test PyPI upload (dry run)
if: ${{ inputs.dry_run == true && inputs.skip_pypi != true }}
run: |
echo "DRY RUN: Would upload to PyPI:"
find artifacts/wheel-* -name "*.whl" -type f | sort
find artifacts/sdist -name "*.tar.gz" -type f | sort
uv tool run twine check artifacts/wheel-*/*.whl artifacts/sdist/*.tar.gz
- name: Skip PyPI publishing
if: ${{ inputs.skip_pypi == true }}
run: echo "Skipping PyPI publishing as requested"
- name: Create Release
if: ${{ inputs.dry_run != true }}
uses: softprops/action-gh-release@v2
with:
generate_release_notes: true
files: |
artifacts/release-*/unifi-cli-*.tar.gz
artifacts/release-*/unifi-cli-*.tar.gz.sha256
artifacts/release-*/unifi-cli-*.zip
artifacts/release-*/unifi-cli-*.zip.sha256
- name: Dry Run Summary
if: ${{ inputs.dry_run == true }}
run: |
echo "Dry run complete. Artifacts built but nothing published."
echo "Archives:"
find artifacts/release-* -type f | sort
update-homebrew:
needs: release
if: ${{ !inputs.dry_run }}
runs-on: ubuntu-latest
steps:
- uses: actions/download-artifact@v4
with:
path: /tmp/artifacts
- name: Compute SHA256 hashes
id: hashes
run: |
for target in x86_64-apple-darwin aarch64-apple-darwin x86_64-unknown-linux-gnu aarch64-unknown-linux-gnu; do
sha=$(cat /tmp/artifacts/release-${target}/unifi-cli-${{ github.ref_name }}-${target}.tar.gz.sha256 | awk '{print $1}')
key=$(echo "${target}" | tr '-' '_')
echo "${key}=${sha}" >> "$GITHUB_OUTPUT"
done
- name: Update Homebrew formula
env:
GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
run: |
VERSION="${{ github.ref_name }}"
VERSION_NUM="${VERSION#v}"
cat > /tmp/unifi-cli.rb << 'FORMULA'
class UnifiCli < Formula
desc "CLI for UniFi Network controllers"
homepage "https://github.com/rvben/unifi-cli"
version "VERSION_NUM"
license "MIT"
on_macos do
if Hardware::CPU.arm?
url "https://github.com/rvben/unifi-cli/releases/download/VERSION/unifi-cli-VERSION-aarch64-apple-darwin.tar.gz"
sha256 "SHA_AARCH64_APPLE_DARWIN"
else
url "https://github.com/rvben/unifi-cli/releases/download/VERSION/unifi-cli-VERSION-x86_64-apple-darwin.tar.gz"
sha256 "SHA_X86_64_APPLE_DARWIN"
end
end
on_linux do
if Hardware::CPU.arm?
url "https://github.com/rvben/unifi-cli/releases/download/VERSION/unifi-cli-VERSION-aarch64-unknown-linux-gnu.tar.gz"
sha256 "SHA_AARCH64_UNKNOWN_LINUX_GNU"
else
url "https://github.com/rvben/unifi-cli/releases/download/VERSION/unifi-cli-VERSION-x86_64-unknown-linux-gnu.tar.gz"
sha256 "SHA_X86_64_UNKNOWN_LINUX_GNU"
end
end
def install
bin.install "unifi"
end
test do
system "#{bin}/unifi", "--version"
end
end
FORMULA
sed -i "s/VERSION_NUM/${VERSION_NUM}/g" /tmp/unifi-cli.rb
sed -i "s/VERSION/${VERSION}/g" /tmp/unifi-cli.rb
sed -i "s/SHA_AARCH64_APPLE_DARWIN/${{ steps.hashes.outputs.aarch64_apple_darwin }}/g" /tmp/unifi-cli.rb
sed -i "s/SHA_X86_64_APPLE_DARWIN/${{ steps.hashes.outputs.x86_64_apple_darwin }}/g" /tmp/unifi-cli.rb
sed -i "s/SHA_AARCH64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.aarch64_unknown_linux_gnu }}/g" /tmp/unifi-cli.rb
sed -i "s/SHA_X86_64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.x86_64_unknown_linux_gnu }}/g" /tmp/unifi-cli.rb
# Clone tap repo, update formula, push
git clone https://x-access-token:${GH_TOKEN}@github.com/rvben/homebrew-tap.git /tmp/tap
mkdir -p /tmp/tap/Formula
cp /tmp/unifi-cli.rb /tmp/tap/Formula/unifi-cli.rb
cd /tmp/tap
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add Formula/unifi-cli.rb
git diff --cached --quiet || git commit -m "Update unifi-cli to ${VERSION}"
git push