vicrodh
a912ced3d0
Cherry-picked from PR #377 (thanks @Mar0xy) — Node-only portion, no Discord IPC additions: - 4 workflows (release-{linux,linux-aarch64,macos,flatpak}.yml) now install Node 24 - packaging/flatpak/com.blitzfc.qbz.yml: SDK extension node20 → node24, build append-path and npm_config_nodedir aligned Forcing function: @icons-pack/svelte-simple-icons@7.x already in use declares engines.node >=24, so Node 20 produces an EBADENGINE warning in CI. Node 20 also reached EOL on 2026-04-30. Node 24 has been LTS since October 2025 (~7 months of maturity). Discord IPC permissions and qbz-wrapper script from #377 were intentionally NOT cherry-picked — there's no Discord RPC feature in QBZ today (#336 is still planned but not implemented), so adding the sandbox permission and the launch wrapper now would expand the attack surface for nothing. They'll land together with the actual feature when it ships. cc
126 lines
3.8 KiB
YAML
126 lines
3.8 KiB
YAML
name: release-macos
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: "Optional release tag to build (e.g. v1.2.1)"
|
|
required: false
|
|
type: string
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
jobs:
|
|
build-macos:
|
|
strategy:
|
|
matrix:
|
|
include:
|
|
- target: aarch64-apple-darwin
|
|
artifact: qbz-macos-aarch64
|
|
- target: x86_64-apple-darwin
|
|
artifact: qbz-macos-x86_64
|
|
runs-on: macos-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Node
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: 24
|
|
cache: npm
|
|
|
|
- name: Resolve release version
|
|
id: release
|
|
run: |
|
|
VERSION=""
|
|
if [[ "${GITHUB_REF}" == refs/tags/v* ]]; then
|
|
VERSION="${GITHUB_REF#refs/tags/v}"
|
|
elif [[ -n "${{ inputs.tag }}" ]]; then
|
|
VERSION="${{ inputs.tag }}"
|
|
VERSION="${VERSION#v}"
|
|
fi
|
|
echo "version=$VERSION" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Sync version to build metadata
|
|
if: steps.release.outputs.version != ''
|
|
env:
|
|
QBZ_VERSION: ${{ steps.release.outputs.version }}
|
|
run: |
|
|
python3 - <<'PY'
|
|
import json
|
|
import os
|
|
import pathlib
|
|
import re
|
|
|
|
version = os.environ["QBZ_VERSION"]
|
|
|
|
def update_json(path, updater):
|
|
p = pathlib.Path(path)
|
|
data = json.loads(p.read_text(encoding="utf-8"))
|
|
updater(data)
|
|
p.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
|
|
|
|
update_json("package.json", lambda d: d.__setitem__("version", version))
|
|
|
|
def update_lock(d):
|
|
d["version"] = version
|
|
packages = d.get("packages")
|
|
if isinstance(packages, dict) and "" in packages:
|
|
packages[""]["version"] = version
|
|
update_json("package-lock.json", update_lock)
|
|
|
|
update_json("src-tauri/tauri.conf.json", lambda d: d.__setitem__("version", version))
|
|
|
|
cargo_path = pathlib.Path("src-tauri/Cargo.toml")
|
|
cargo_text = cargo_path.read_text(encoding="utf-8")
|
|
cargo_text = re.sub(r'(?m)^version = \"[^\"]+\"', f'version = \"{version}\"', cargo_text, count=1)
|
|
cargo_path.write_text(cargo_text, encoding="utf-8")
|
|
PY
|
|
|
|
- name: Setup Rust
|
|
uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
targets: ${{ matrix.target }}
|
|
|
|
- name: Rust cache
|
|
uses: Swatinem/rust-cache@v2
|
|
with:
|
|
workspaces: src-tauri -> target
|
|
shared-key: macos-${{ matrix.target }}
|
|
|
|
- name: Install JS dependencies
|
|
run: npm ci
|
|
|
|
- name: Build macOS bundles
|
|
env:
|
|
TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
|
|
TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
|
|
run: npm run tauri build -- --target ${{ matrix.target }}
|
|
|
|
- name: Collect artifacts
|
|
run: |
|
|
mkdir -p dist
|
|
# DMG for manual distribution
|
|
cp -v src-tauri/target/${{ matrix.target }}/release/bundle/dmg/*.dmg dist/ || true
|
|
# .app.tar.gz + .sig for auto-updater
|
|
cp -v src-tauri/target/${{ matrix.target }}/release/bundle/macos/*.tar.gz dist/ || true
|
|
cp -v src-tauri/target/${{ matrix.target }}/release/bundle/macos/*.tar.gz.sig dist/ || true
|
|
ls -la dist
|
|
|
|
- name: Upload artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: ${{ matrix.artifact }}
|
|
path: dist/*
|
|
|
|
- name: Publish GitHub Release Assets
|
|
if: startsWith(github.ref, 'refs/tags/')
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
files: dist/*
|
|
prerelease: true
|