name: Release
on:
push:
tags:
- "v[0-9]*.[0-9]*.[0-9]*"
workflow_dispatch:
inputs:
dry_run:
description: "Dry run (skip publishing)"
required: false
default: true
type: boolean
skip_crates_io:
description: "Skip crates.io publish"
required: false
default: false
type: boolean
skip_pypi:
description: "Skip PyPI publish"
required: false
default: false
type: boolean
permissions:
contents: write
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- run: cargo check --locked
- run: cargo test
build:
needs: test
strategy:
matrix:
include:
- target: x86_64-unknown-linux-gnu
os: ubuntu-latest
- target: aarch64-unknown-linux-gnu
os: ubuntu-latest
- target: x86_64-apple-darwin
os: macos-latest
- target: aarch64-apple-darwin
os: macos-latest
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
targets: ${{ matrix.target }}
- name: Install cross-compilation tools
if: matrix.target == 'aarch64-unknown-linux-gnu'
run: |
sudo apt-get update
sudo apt-get install -y gcc-aarch64-linux-gnu
- name: Install maturin and zig
run: pip install maturin ziglang
- name: Build wheel
shell: bash
run: |
case "${{ matrix.target }}" in
*-gnu)
maturin build --release --target ${{ matrix.target }} --zig
;;
*)
maturin build --release --target ${{ matrix.target }}
;;
esac
- name: Build binary
run: cargo build --release --target ${{ matrix.target }}
env:
CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
- name: Package binary
run: |
ARCHIVE_NAME="vership-${{ github.ref_name }}-${{ matrix.target }}"
mkdir -p "${ARCHIVE_NAME}"
cp "target/${{ matrix.target }}/release/vership" "${ARCHIVE_NAME}/"
tar czf "${ARCHIVE_NAME}.tar.gz" "${ARCHIVE_NAME}"
shasum -a 256 "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
- uses: actions/upload-artifact@v4
with:
name: build-${{ matrix.target }}
path: |
vership-*.tar.gz
vership-*.tar.gz.sha256
target/wheels/*.whl
sdist:
needs: test
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install maturin
run: pip install maturin
- name: Build sdist
run: maturin sdist
- uses: actions/upload-artifact@v4
with:
name: sdist
path: target/wheels/*.tar.gz
release:
needs: [build, sdist]
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/download-artifact@v4
with:
path: /tmp/artifacts
- uses: dtolnay/rust-toolchain@stable
- name: Publish to crates.io
if: ${{ !inputs.dry_run && !inputs.skip_crates_io }}
run: cargo publish
env:
CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
- name: Install uv
uses: astral-sh/setup-uv@v6
- name: Publish to PyPI
if: ${{ !inputs.dry_run && !inputs.skip_pypi }}
run: uv publish /tmp/artifacts/build-*/*.whl /tmp/artifacts/sdist/*.tar.gz
env:
UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
- name: Create GitHub Release
if: ${{ !inputs.dry_run }}
run: |
gh release create ${{ github.ref_name }} \
--title "${{ github.ref_name }}" \
--generate-notes \
/tmp/artifacts/build-*/*.tar.gz \
/tmp/artifacts/build-*/*.sha256
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
update-homebrew:
needs: release
if: ${{ !inputs.dry_run }}
runs-on: ubuntu-latest
steps:
- uses: actions/download-artifact@v4
with:
path: /tmp/artifacts
- name: Compute SHA256 hashes
id: hashes
run: |
for target in x86_64-apple-darwin aarch64-apple-darwin x86_64-unknown-linux-gnu aarch64-unknown-linux-gnu; do
sha=$(cat /tmp/artifacts/build-${target}/vership-${{ github.ref_name }}-${target}.tar.gz.sha256 | awk '{print $1}')
key=$(echo "${target}" | tr '-' '_')
echo "${key}=${sha}" >> "$GITHUB_OUTPUT"
done
- name: Update Homebrew formula
env:
GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
run: |
VERSION="${{ github.ref_name }}"
VERSION_NUM="${VERSION#v}"
cat > /tmp/vership.rb << 'FORMULA'
class Vership < Formula
desc "Multi-target release orchestrator"
homepage "https://github.com/rvben/vership"
version "VERSION_NUM"
license "MIT"
on_macos do
if Hardware::CPU.arm?
url "https://github.com/rvben/vership/releases/download/VERSION/vership-VERSION-aarch64-apple-darwin.tar.gz"
sha256 "SHA_AARCH64_APPLE_DARWIN"
else
url "https://github.com/rvben/vership/releases/download/VERSION/vership-VERSION-x86_64-apple-darwin.tar.gz"
sha256 "SHA_X86_64_APPLE_DARWIN"
end
end
on_linux do
if Hardware::CPU.arm?
url "https://github.com/rvben/vership/releases/download/VERSION/vership-VERSION-aarch64-unknown-linux-gnu.tar.gz"
sha256 "SHA_AARCH64_UNKNOWN_LINUX_GNU"
else
url "https://github.com/rvben/vership/releases/download/VERSION/vership-VERSION-x86_64-unknown-linux-gnu.tar.gz"
sha256 "SHA_X86_64_UNKNOWN_LINUX_GNU"
end
end
def install
bin.install "vership"
end
test do
system "#{bin}/vership", "--version"
end
end
FORMULA
sed -i "s/VERSION_NUM/${VERSION_NUM}/g" /tmp/vership.rb
sed -i "s/VERSION/${VERSION}/g" /tmp/vership.rb
sed -i "s/SHA_AARCH64_APPLE_DARWIN/${{ steps.hashes.outputs.aarch64_apple_darwin }}/g" /tmp/vership.rb
sed -i "s/SHA_X86_64_APPLE_DARWIN/${{ steps.hashes.outputs.x86_64_apple_darwin }}/g" /tmp/vership.rb
sed -i "s/SHA_AARCH64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.aarch64_unknown_linux_gnu }}/g" /tmp/vership.rb
sed -i "s/SHA_X86_64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.x86_64_unknown_linux_gnu }}/g" /tmp/vership.rb
# Clone tap repo, update formula, push
git clone https://x-access-token:${GH_TOKEN}@github.com/rvben/homebrew-tap.git /tmp/tap
mkdir -p /tmp/tap/Formula
cp /tmp/vership.rb /tmp/tap/Formula/vership.rb
cd /tmp/tap
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
git add Formula/vership.rb
git diff --cached --quiet || git commit -m "Update vership to ${VERSION}"
git push