release.yml

name: Release builds

# Builds native installers for every platform and attaches them to the GitHub
# Release. Triggers on a version tag (v*), or manually against an existing tag.
on:
  push:
    tags: ['v*']
  workflow_dispatch:
    inputs:
      tag:
        description: 'Existing tag to build and attach installers to (e.g. v0.1.0)'
        required: true

permissions:
  contents: write

jobs:
  release:
    strategy:
      fail-fast: false
      matrix:
        include:
          # One universal Mac dmg (Intel + Apple Silicon) built on the ARM runner —
          # avoids the scarce/stall-prone macos-13 Intel runner entirely.
          - { platform: macos-latest,   target: 'aarch64-apple-darwin,x86_64-apple-darwin', args: '--target universal-apple-darwin --bundles dmg' }
          - { platform: ubuntu-22.04,    target: '',                   args: '--bundles deb,appimage' }                        # Linux
          - { platform: windows-latest,  target: '',                   args: '--bundles nsis' }                                # Windows
    runs-on: ${{ matrix.platform }}
    steps:
      - uses: actions/checkout@v4

      - name: Install Linux build deps
        if: matrix.platform == 'ubuntu-22.04'
        run: |
          sudo apt-get update
          sudo apt-get install -y libwebkit2gtk-4.1-dev libgtk-3-dev libayatana-appindicator3-dev librsvg2-dev patchelf

      - uses: actions/setup-node@v4
        with:
          node-version: 20

      - uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}

      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: './src-tauri -> target'

      - run: npm ci

      - uses: tauri-apps/tauri-action@v0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          # Signs the updater artifacts so the app trusts the new build. Set these
          # repo secrets before tagging a release (see CONTRIBUTING / release notes).
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        with:
          tagName: ${{ github.event.inputs.tag || github.ref_name }}
          releaseName: 'Desk Rave ${{ github.event.inputs.tag || github.ref_name }}'
          releaseDraft: false
          prerelease: false
          # emits + uploads latest.json (the updater manifest) to the release
          includeUpdaterJson: true
          args: ${{ matrix.args }}