TruffleHog Secret Scan / TruffleHog (push) Successful in 25s
Code Quality (Auto-Format & Clippy-Fix) / Formatierung & Clippy automatisch beheben (push) Successful in 53s
Security Scans / Trivy & OSV-Scanner (push) Successful in 52s
Testing Build, Check & Preview Release / Build, Check & Create Preview Release (push) Skipped
Prüft vor Build & Tests per Gitea Package-API, ob die aktuelle Crate-Version schon in der Registry existiert, und bricht den Release/Publish-Job dann gar nicht erst an, statt an einem Registry-Fehler zu scheitern. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01K2DxAVavuu4vMb2MC2G15g
177 lines
6.8 KiB
YAML
177 lines
6.8 KiB
YAML
name: Main Release & Publish
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
detect-changes:
|
|
name: Erkenne relevante Code-Änderungen
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
code_changed: ${{ steps.filter.outputs.code }}
|
|
version_exists: ${{ steps.check-version.outputs.exists }}
|
|
steps:
|
|
- name: Checkout Repository
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Prüfe auf Änderungen am Programmcode
|
|
uses: dorny/paths-filter@v4
|
|
id: filter
|
|
with:
|
|
filters: |
|
|
code:
|
|
- 'src/**'
|
|
- 'Cargo.toml'
|
|
- 'Cargo.lock'
|
|
- 'scripts/**'
|
|
- '.cargo/**'
|
|
- '.gitea/workflows/main.yaml'
|
|
|
|
- name: Prüfe ob Version bereits in der Registry existiert
|
|
id: check-version
|
|
if: steps.filter.outputs.code == 'true'
|
|
env:
|
|
GITEA_URL: ${{ gitea.server_url || github.server_url }}
|
|
REPO_OWNER: ${{ gitea.repository_owner || github.repository_owner }}
|
|
TOKEN: ${{ secrets.PACKAGE_TOKEN || secrets.RELEASE_TOKEN || secrets.PUBLISH_TOKEN || secrets.API_TOKEN || secrets.PAT_TOKEN || secrets.CUSTOM_TOKEN || secrets.GITEA_TOKEN || secrets.GITHUB_TOKEN || github.token }}
|
|
run: |
|
|
python3 scripts/check-version-published.py
|
|
|
|
release-and-publish:
|
|
name: Build, Publish Crate to Gitea Registry & Create Release
|
|
needs: detect-changes
|
|
if: needs.detect-changes.outputs.code_changed == 'true' && needs.detect-changes.outputs.version_exists != 'true'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout Repository
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Install Rust Toolchain
|
|
uses: actions-rust-lang/setup-rust-toolchain@v2
|
|
with:
|
|
toolchain: stable
|
|
cache: false
|
|
|
|
- name: Cache Cargo-Abhängigkeiten & Build-Artefakte
|
|
uses: actions/cache@v6
|
|
with:
|
|
path: |
|
|
~/.cargo/registry
|
|
~/.cargo/git
|
|
target
|
|
key: cargo-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
|
|
restore-keys: |
|
|
cargo-${{ runner.os }}-
|
|
|
|
- name: Run Tests
|
|
run: |
|
|
cargo test
|
|
|
|
- name: Compiler Check
|
|
run: |
|
|
cargo check --all-targets
|
|
|
|
- name: Package Crate
|
|
run: |
|
|
cargo package
|
|
|
|
- name: Publish Crate to Gitea Package Registry
|
|
env:
|
|
GITEA_URL: ${{ gitea.server_url || github.server_url }}
|
|
REPO_OWNER: ${{ gitea.repository_owner || github.repository_owner }}
|
|
TOKEN: ${{ secrets.PACKAGE_TOKEN || secrets.RELEASE_TOKEN || secrets.PUBLISH_TOKEN || secrets.API_TOKEN || secrets.PAT_TOKEN || secrets.CUSTOM_TOKEN || secrets.GITEA_TOKEN || secrets.GITHUB_TOKEN || github.token }}
|
|
run: |
|
|
mkdir -p ~/.cargo
|
|
cat <<EOF > ~/.cargo/config.toml
|
|
[registries.gitea]
|
|
index = "sparse+${GITEA_URL}/api/packages/${REPO_OWNER}/cargo/"
|
|
EOF
|
|
|
|
cat <<EOF > ~/.cargo/credentials.toml
|
|
[registries.gitea]
|
|
token = "Bearer ${TOKEN}"
|
|
EOF
|
|
|
|
export CARGO_REGISTRIES_GITEA_INDEX="sparse+${GITEA_URL}/api/packages/${REPO_OWNER}/cargo/"
|
|
export CARGO_REGISTRIES_GITEA_TOKEN="Bearer ${TOKEN}"
|
|
|
|
echo "Veröffentliche Crate in Gitea Cargo Package Registry..."
|
|
cargo publish --registry gitea
|
|
|
|
- name: Create Gitea Release and Upload Assets
|
|
env:
|
|
GITEA_URL: ${{ gitea.server_url || github.server_url }}
|
|
REPO: ${{ gitea.repository || github.repository }}
|
|
REPO_NAME: ${{ gitea.repository_name || github.event.repository.name }}
|
|
TOKEN: ${{ secrets.PACKAGE_TOKEN || secrets.RELEASE_TOKEN || secrets.PUBLISH_TOKEN || secrets.API_TOKEN || secrets.PAT_TOKEN || secrets.CUSTOM_TOKEN || secrets.GITEA_TOKEN || secrets.GITHUB_TOKEN || github.token }}
|
|
run: |
|
|
VERSION="$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -n1)"
|
|
TAG_NAME="v${VERSION}"
|
|
RELEASE_TITLE="Release ${TAG_NAME}"
|
|
RELEASE_NOTES="Automatisches Release für ${REPO_NAME} Crate ${VERSION}."
|
|
|
|
echo "Erstelle oder hole Release für Tag ${TAG_NAME} in ${REPO}..."
|
|
|
|
GET_RESP=$(curl -s -w "\n%{http_code}" \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
"${GITEA_URL}/api/v1/repos/${REPO}/releases/tags/${TAG_NAME}")
|
|
HTTP_CODE=$(echo "$GET_RESP" | tail -n1)
|
|
BODY=$(echo "$GET_RESP" | sed '$d')
|
|
|
|
RELEASE_ID=""
|
|
if [ "$HTTP_CODE" -eq 200 ]; then
|
|
RELEASE_ID=$(echo "$BODY" | jq -r '.id // empty' 2>/dev/null || echo "$BODY" | grep -o '"id":[0-9]*' | head -n1 | cut -d: -f2)
|
|
echo "Bestehendes Release gefunden (ID: ${RELEASE_ID})."
|
|
else
|
|
echo "Erstelle neues Release ${TAG_NAME}..."
|
|
CREATE_PAYLOAD=$(cat <<EOF
|
|
{
|
|
"tag_name": "${TAG_NAME}",
|
|
"target_commitish": "main",
|
|
"name": "${RELEASE_TITLE}",
|
|
"body": "${RELEASE_NOTES}",
|
|
"draft": false,
|
|
"prerelease": false
|
|
}
|
|
EOF
|
|
)
|
|
CREATE_RESP=$(curl -f -s -S -X POST \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$CREATE_PAYLOAD" \
|
|
"${GITEA_URL}/api/v1/repos/${REPO}/releases")
|
|
RELEASE_ID=$(echo "$CREATE_RESP" | jq -r '.id // empty' 2>/dev/null || echo "$CREATE_RESP" | grep -o '"id":[0-9]*' | head -n1 | cut -d: -f2)
|
|
echo "Neues Release erstellt (ID: ${RELEASE_ID})."
|
|
fi
|
|
|
|
if [ -z "$RELEASE_ID" ]; then
|
|
echo "Fehler: Release-ID konnte nicht ermittelt werden!"
|
|
exit 1
|
|
fi
|
|
|
|
EXISTING_ASSETS_JSON=$(curl -s \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
"${GITEA_URL}/api/v1/repos/${REPO}/releases/${RELEASE_ID}/assets" || echo "[]")
|
|
|
|
for file in target/package/*.crate; do
|
|
[ -f "$file" ] || continue
|
|
filename="$(basename "$file")"
|
|
echo "Lade Release-Asset hoch: $filename"
|
|
|
|
ASSET_ID=$(echo "$EXISTING_ASSETS_JSON" | jq -r --arg name "$filename" '.[]? | select(.name == $name) | .id' 2>/dev/null | head -n1 || true)
|
|
if [ -n "$ASSET_ID" ] && [ "$ASSET_ID" != "null" ]; then
|
|
echo "Lösche altes Asset mit ID ${ASSET_ID}..."
|
|
curl -s -X DELETE \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
"${GITEA_URL}/api/v1/repos/${REPO}/releases/${RELEASE_ID}/assets/${ASSET_ID}" || true
|
|
fi
|
|
|
|
curl -f -s -S -X POST \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
-F "attachment=@${file}" \
|
|
"${GITEA_URL}/api/v1/repos/${REPO}/releases/${RELEASE_ID}/assets?name=${filename}"
|
|
echo "Asset ${filename} erfolgreich hochgeladen."
|
|
done
|