Skip to content

ci: simplify github actions workflows #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
calmcacil merged 1 commit into from
Jul 1, 2026
Merged

ci: simplify github actions workflows #12

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
154 changes: 51 additions & 103 deletions .github/workflows/auto-tag-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,12 +5,6 @@ on:
branches:
- main
workflow_dispatch:
inputs:
allow_current_head:
description: Allow tagging current HEAD even if it is not a release-please commit
required: false
type: boolean
default: false

permissions: {}

Expand All @@ -21,105 +15,59 @@ concurrency:
jobs:
tag:
permissions:
contents: read
contents: write
runs-on: ubuntu-latest
timeout-minutes: 10
timeout-minutes: 5
env:
ALLOW_CURRENT_HEAD: ${{ github.event.inputs.allow_current_head || 'false' }}
RELEASE_PLEASE_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN }}

steps:
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0
fetch-tags: true
token: ${{ secrets.RELEASE_PLEASE_TOKEN }}

- name: Validate VERSION and create tag
shell: bash
run: |
set -euo pipefail

if [[ -z "${RELEASE_PLEASE_TOKEN:-}" ]]; then
echo "error: RELEASE_PLEASE_TOKEN is required so the tag push can trigger the package release workflow." >&2
exit 1
fi

head_subject="$(git log -1 --pretty=%s)"
head_message="$(git log -1 --pretty=%B)"

if [[ "${GITHUB_EVENT_NAME}" == "push" || "${ALLOW_CURRENT_HEAD}" != "true" ]]; then
is_release_commit=false
while IFS= read -r line; do
if [[ "$line" =~ ^chore\(main\):[[:space:]]release[[:space:]] ]]; then
is_release_commit=true
break
fi
done <<< "$head_message"

if [[ "$is_release_commit" != true ]]; then
echo "Head commit is not a release-please commit. Skipping tag creation."
exit 0
fi
fi

[[ -f VERSION ]] || { echo "error: VERSION is missing" >&2; exit 1; }
version=$(tr -d '\r\n' < VERSION)
semver_regex='^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$'
if [[ ! "$version" =~ $semver_regex ]]; then
echo "error: VERSION '$version' is not valid semantic versioning" >&2
exit 1
fi

tag="v${version}"
if git ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
echo "Tag $tag already exists. Nothing to do."
exit 0
fi

git config user.name github-actions[bot]
git config user.email 41898282+github-actions[bot]@users.noreply.github.com
git tag -a "$tag" -m "$tag"
git push origin "$tag"

- name: Mark release PR as tagged
shell: bash
env:
GH_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN }}
run: |
set -euo pipefail

if [[ -z "${GH_TOKEN:-}" ]]; then
echo "error: RELEASE_PLEASE_TOKEN is required to update release PR labels." >&2
exit 1
fi

if [[ "${GITHUB_EVENT_NAME}" != "push" ]]; then
echo "Manual run detected. Skipping release PR label update."
exit 0
fi

head_subject="$(git log -1 --pretty=%s)"
head_message="$(git log -1 --pretty=%B)"

pr_number=""
if [[ "$head_subject" =~ ^Merge\ pull\ request\ \#([0-9]+)\ from\ ]]; then
pr_number="${BASH_REMATCH[1]}"
else
while IFS= read -r line; do
if [[ "$line" =~ ^chore\(main\):\ release\ .*\ \(#([0-9]+)\)$ ]]; then
pr_number="${BASH_REMATCH[1]}"
break
fi
done <<< "$head_message"
fi

if [[ -z "$pr_number" ]]; then
echo "Head commit is not a release-please merge commit. Skipping label update."
exit 0
fi

gh api --method DELETE "repos/${GITHUB_REPOSITORY}/issues/${pr_number}/labels/autorelease%3A%20pending" >/dev/null || true

echo "Removed autorelease: pending label from release PR #${pr_number}."
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0
fetch-tags: true
token: ${{ secrets.RELEASE_PLEASE_TOKEN }}

- name: Create release tag
shell: bash
run: |
set -euo pipefail

if [[ -z "${RELEASE_PLEASE_TOKEN:-}" ]]; then
echo "error: RELEASE_PLEASE_TOKEN is required so the tag push can trigger release packaging." >&2
exit 1
fi

head_message="$(git log -1 --pretty=%B)"
is_release_commit=false
while IFS= read -r line; do
if [[ "$line" =~ ^chore\(main\):[[:space:]]release[[:space:]] ]]; then
is_release_commit=true
break
fi
done <<< "$head_message"

if [[ "$is_release_commit" != true ]]; then
echo "Head commit is not a release-please commit. Skipping tag creation."
exit 0
fi

[[ -f VERSION ]] || { echo "error: VERSION is missing" >&2; exit 1; }
version=$(tr -d '\r\n' < VERSION)
semver_regex='^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$'
if [[ ! "$version" =~ $semver_regex ]]; then
echo "error: VERSION '$version' is not valid semantic versioning" >&2
exit 1
fi

tag="v${version}"
if git ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
echo "Tag $tag already exists. Nothing to do."
exit 0
fi

git config user.name github-actions[bot]
git config user.email 41898282+github-actions[bot]@users.noreply.github.com
git tag -a "$tag" -m "$tag"
git push origin "$tag"
65 changes: 0 additions & 65 deletions .github/workflows/branch-protection.yml
View file
Open in desktop

This file was deleted.

125 changes: 80 additions & 45 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,23 @@ on:
push:
branches:
- main
paths-ignore:
- '*.md'
- 'docs/**'
- 'LICENSE'
- 'NOTICE'
pull_request:
branches:
- main
paths-ignore:
- '*.md'
- 'docs/**'
- 'LICENSE'
- 'NOTICE'
workflow_dispatch:

permissions: {}
permissions:
contents: read

concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
Expand All @@ -25,23 +38,25 @@ jobs:
should_run: ${{ steps.filter.outputs.code_or_release }}

steps:
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0

- name: Detect code and release file changes
id: filter
uses: dorny/paths-filter@v3
with:
filters: |
code_or_release:
- '**/*.lua'
- '**/*.toc'
- 'scripts/**'
- 'VERSION'
- '.release-please-manifest.json'
- 'release-please-config.json'
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0

- name: Detect code and release file changes
id: filter
uses: dorny/paths-filter@v3
with:
filters: |
code_or_release:
- '**/*.lua'
- '**/*.toc'
- 'scripts/**'
- 'VERSION'
- '.release-please-manifest.json'
- 'release-please-config.json'
- '.github/workflows/*.yml'
- '.github/workflows/**/*.yml'

static:
name: static
Expand All @@ -53,16 +68,16 @@ jobs:
timeout-minutes: 10

steps:
- name: Clone project
uses: actions/checkout@v4
- name: Clone project
uses: actions/checkout@v4

- name: Install Lua 5.1
run: |
sudo apt-get update
sudo apt-get install -y --no-install-recommends lua5.1
- name: Install Lua 5.1
run: |
sudo apt-get update
sudo apt-get install -y --no-install-recommends lua5.1

- name: Run static checks
run: bash scripts/check-static.sh
- name: Run static checks
run: bash scripts/check-static.sh

package:
name: package
Expand All @@ -78,22 +93,42 @@ jobs:
GITHUB_OAUTH: ${{ github.token }}

steps:
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0

- name: Build dry-run package
uses: BigWigsMods/packager@v2
with:
args: -d

- name: Upload packaged artifact
uses: actions/upload-artifact@v4
with:
name: calmchat-package-dry-run
path: |
.release/*.zip
.release/**/*.zip
if-no-files-found: warn
include-hidden-files: true
- name: Clone project
uses: actions/checkout@v4
with:
fetch-depth: 0

- name: Build dry-run package
uses: BigWigsMods/packager@v2
with:
args: -d

- name: Upload packaged artifact
uses: actions/upload-artifact@v4
with:
name: calmchat-package-dry-run
path: |
.release/*.zip
.release/**/*.zip
if-no-files-found: warn
include-hidden-files: true

required:
name: required
if: always()
needs:
- changes
- static
- package
runs-on: ubuntu-latest
timeout-minutes: 2

steps:
- name: Ensure required checks passed
run: |
if [ "${{ needs.changes.result }}" = "failure" ] ||
[ "${{ needs.static.result }}" = "failure" ] ||
[ "${{ needs.package.result }}" = "failure" ]; then
echo "One or more required checks failed"
exit 1
fi
Loading
Loading