chore(deps): bump postcss from 8.4.21 to 8.4.31 #187
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build and Provide artifacts | |
on: | |
workflow_dispatch: | |
push: | |
tags: ["v*.*.*"] | |
pull_request: | |
branches: | |
- main | |
jobs: | |
build-linux: | |
name: Build for Linux and Provide artifacts | |
runs-on: ubuntu-latest | |
if: false | |
steps: | |
- name: Checkout Repository | |
uses: actions/checkout@v3 | |
- name: Setup Libindy | |
uses: ./.github/actions/setup-libindy | |
- name: Install dependencies | |
run: yarn install --frozen-lockfile | |
- name: Build for all platforms | |
run: yarn --cwd packages/siera-desktop make -p linux | |
- name: Upload artifacts | |
uses: actions/upload-artifact@v3 | |
if: (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' | |
with: | |
name: siera-desktop-linux | |
path: ./packages/siera-desktop/out/make/**/*.* | |
retention-days: 7 | |
build-macos: | |
name: Build for MacOS and Provide artifacts | |
runs-on: macos-latest | |
strategy: | |
matrix: | |
arch: [x64, arm64] | |
env: | |
MACOS_BUILD_CERTIFICATE_BASE64: ${{ secrets.SIERA_MACOS_BUILD_CERTIFICATE_BASE64 }} | |
MACOS_P12_PASSWORD: ${{ secrets.SIERA_MACOS_P12_PASSWORD }} | |
MACOS_BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.SIERA_MACOS_BUILD_PROVISION_PROFILE_BASE64 }} | |
MACOS_KEYCHAIN_PASSWORD: ${{ secrets.SIERA_MACOS_KEYCHAIN_PASSWORD }} | |
APPLE_API_KEY_BASE64: ${{ secrets.SIERA_APPLE_API_KEY_BASE64 }} | |
APPLE_API_KEY_ID: ${{ secrets.SIERA_APPLE_API_KEY_ID }} | |
APPLE_API_ISSUER: ${{ secrets.SIERA_APPLE_API_ISSUER }} | |
steps: | |
- name: Checkout Repository | |
uses: actions/checkout@v3 | |
- name: Install the Apple certificate and provisioning profile | |
env: | |
CERTIFICATE_PATH: ${{ runner.temp }}/build_certificate.p12 | |
PROVISION_PROFILE_PATH: ${{ runner.temp }}/build_pp.mobileprovision | |
KEYCHAIN_PATH: ${{ runner.temp }}/app-signing.keychain-db | |
run: | | |
# import certificate and provisioning profile from secrets | |
echo -n $MACOS_BUILD_CERTIFICATE_BASE64 | base64 --decode --output $CERTIFICATE_PATH | |
echo -n $MACOS_BUILD_PROVISION_PROFILE_BASE64 | base64 --decode --output $PROVISION_PROFILE_PATH | |
# create temporary keychain | |
security create-keychain -p $MACOS_KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
security set-keychain-settings -lut 21600 $KEYCHAIN_PATH | |
security unlock-keychain -p $MACOS_KEYCHAIN_PASSWORD $KEYCHAIN_PATH | |
# import certificate to keychain | |
security import $CERTIFICATE_PATH -P $MACOS_P12_PASSWORD -A -t cert -f pkcs12 -k $KEYCHAIN_PATH | |
security list-keychain -d user -s $KEYCHAIN_PATH | |
# apply provisioning profile | |
mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles | |
cp $PROVISION_PROFILE_PATH ~/Library/MobileDevice/Provisioning\ Profiles | |
- name: Check code signing setup | |
run: security find-identity -p codesigning -v | |
- name: Setup libindy and libraries | |
run: | | |
brew install dylibbundler | |
sudo cp ./libs/${{ matrix.arch }}/* /usr/local/lib | |
- name: Change node version | |
uses: actions/setup-node@v3 | |
with: | |
node-version: '18' | |
- name: Install dependencies | |
run: yarn install --frozen-lockfile | |
- name: Build for MacOS platform | |
env: | |
NODE_ENV: production | |
run: | | |
export APPLE_API_KEY_PATH=$RUNNER_TEMP/siera-apple-api-key.p8 | |
echo -n "$APPLE_API_KEY_BASE64" | base64 --decode --output $APPLE_API_KEY_PATH | |
sudo spctl --master-disable | |
yarn --cwd packages/siera-desktop make -p darwin --arch ${{ matrix.arch }} | |
- name: Upload artifacts | |
uses: actions/upload-artifact@v3 | |
if: (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' | |
with: | |
name: siera-desktop-macos-${{ matrix.arch }} | |
path: ./packages/siera-desktop/out/make/**/*.* | |
retention-days: 7 | |
release: | |
name: Create Github release from artifacts | |
runs-on: ubuntu-latest | |
needs: | |
- build-macos | |
#- build-linux | |
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') | |
steps: | |
- name: Download built binaries | |
uses: actions/download-artifact@v3 | |
- name: Release | |
uses: softprops/action-gh-release@v1 | |
with: | |
draft: true | |
files: | | |
./**/*.deb | |
./**/*.exe | |
./**/*.nupkg | |
./**/*.rpm | |
./**/*.zip | |
./**/*.AppImage | |
./**/RELEASES |