|
| 1 | +name: Release Candidate |
| 2 | + |
| 3 | +on: |
| 4 | + push: |
| 5 | + branches: |
| 6 | + - "codex/**" |
| 7 | + workflow_dispatch: |
| 8 | + inputs: |
| 9 | + ref: |
| 10 | + description: Git ref, branch, tag, or SHA to build |
| 11 | + required: true |
| 12 | + default: main |
| 13 | + |
| 14 | +permissions: {} |
| 15 | + |
| 16 | +env: |
| 17 | + CANDIDATE_REF: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || github.ref }} |
| 18 | + |
| 19 | +concurrency: |
| 20 | + group: release-candidate-${{ github.ref }} |
| 21 | + cancel-in-progress: false |
| 22 | + |
| 23 | +jobs: |
| 24 | + build-native: |
| 25 | + name: Build native ${{ matrix.target }} |
| 26 | + strategy: |
| 27 | + fail-fast: false |
| 28 | + matrix: |
| 29 | + include: |
| 30 | + - target: darwin-arm64 |
| 31 | + rust_target: aarch64-apple-darwin |
| 32 | + runner: macos-14 |
| 33 | + - target: darwin-x86_64 |
| 34 | + rust_target: x86_64-apple-darwin |
| 35 | + runner: macos-14 |
| 36 | + - target: linux-x86_64 |
| 37 | + rust_target: x86_64-unknown-linux-gnu |
| 38 | + runner: ubuntu-24.04 |
| 39 | + - target: linux-arm64 |
| 40 | + rust_target: aarch64-unknown-linux-gnu |
| 41 | + runner: ubuntu-24.04-arm |
| 42 | + runs-on: ${{ matrix.runner }} |
| 43 | + permissions: |
| 44 | + contents: read |
| 45 | + steps: |
| 46 | + - name: Checkout selected ref |
| 47 | + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 |
| 48 | + with: |
| 49 | + ref: ${{ env.CANDIDATE_REF }} |
| 50 | + persist-credentials: false |
| 51 | + - name: Install Rust target |
| 52 | + run: rustup target add ${{ matrix.rust_target }} |
| 53 | + - name: Verify candidate version |
| 54 | + run: | |
| 55 | + test "$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -n 1)" = "0.2.1" |
| 56 | + test "$(jq -r .version package.json)" = "0.2.1" |
| 57 | + - name: Build native candidate |
| 58 | + env: |
| 59 | + SWITCHLOOM_TARGET: ${{ matrix.target }} |
| 60 | + SWITCHLOOM_CARGO_TARGET: ${{ matrix.rust_target }} |
| 61 | + run: scripts/build-release.sh |
| 62 | + - name: Stage npm native binary |
| 63 | + run: | |
| 64 | + mkdir -p "npm/native/${{ matrix.target }}" |
| 65 | + install -m 755 "target/${{ matrix.rust_target }}/release/model-routing" \ |
| 66 | + "npm/native/${{ matrix.target }}/model-routing" |
| 67 | + - name: Verify native version on matching runner |
| 68 | + run: | |
| 69 | + test "$(./target/${{ matrix.rust_target }}/release/model-routing --version)" = "model-routing 0.2.1" |
| 70 | + - name: Write native provenance |
| 71 | + env: |
| 72 | + TARGET: ${{ matrix.target }} |
| 73 | + RUST_TARGET: ${{ matrix.rust_target }} |
| 74 | + RUNNER_NAME: ${{ matrix.runner }} |
| 75 | + run: | |
| 76 | + mkdir -p "native-provenance/$TARGET" |
| 77 | + sha="$(shasum -a 256 "npm/native/$TARGET/model-routing" | awk '{print $1}')" |
| 78 | + version="$(./target/$RUST_TARGET/release/model-routing --version)" |
| 79 | + git_sha="$(git rev-parse HEAD)" |
| 80 | + built_at="$(date -u +%Y-%m-%dT%H:%M:%SZ)" |
| 81 | + jq -n \ |
| 82 | + --arg target "$TARGET" \ |
| 83 | + --arg rust_target "$RUST_TARGET" \ |
| 84 | + --arg runner "$RUNNER_NAME" \ |
| 85 | + --arg path "npm/native/$TARGET/model-routing" \ |
| 86 | + --arg version "$version" \ |
| 87 | + --arg sha256 "$sha" \ |
| 88 | + --arg git_sha "$git_sha" \ |
| 89 | + --arg built_at "$built_at" \ |
| 90 | + '{target:$target,rust_target:$rust_target,runner:$runner,path:$path,version:$version,sha256:$sha256,git_sha:$git_sha,built_at:$built_at}' \ |
| 91 | + > "native-provenance/$TARGET/provenance.json" |
| 92 | + printf '%s npm/native/%s/model-routing\n' "$sha" "$TARGET" \ |
| 93 | + > "native-provenance/$TARGET/SHA256SUMS" |
| 94 | + - name: Upload native candidate |
| 95 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 |
| 96 | + with: |
| 97 | + name: switchloom-native-${{ matrix.target }} |
| 98 | + path: | |
| 99 | + npm/native/${{ matrix.target }}/model-routing |
| 100 | + native-provenance/${{ matrix.target }}/provenance.json |
| 101 | + native-provenance/${{ matrix.target }}/SHA256SUMS |
| 102 | + if-no-files-found: error |
| 103 | + |
| 104 | + package-check: |
| 105 | + name: Validate npm package from native matrix |
| 106 | + needs: build-native |
| 107 | + runs-on: ubuntu-24.04 |
| 108 | + permissions: |
| 109 | + contents: read |
| 110 | + steps: |
| 111 | + - name: Checkout selected ref |
| 112 | + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5 |
| 113 | + with: |
| 114 | + ref: ${{ env.CANDIDATE_REF }} |
| 115 | + persist-credentials: false |
| 116 | + - name: Setup Node |
| 117 | + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 |
| 118 | + with: |
| 119 | + node-version: 24 |
| 120 | + package-manager-cache: false |
| 121 | + - name: Download native candidates |
| 122 | + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 |
| 123 | + with: |
| 124 | + pattern: switchloom-native-* |
| 125 | + path: rc-artifacts |
| 126 | + - name: Stage native candidates and provenance |
| 127 | + run: | |
| 128 | + mkdir -p npm/native provenance-parts |
| 129 | + for target in darwin-arm64 darwin-x86_64 linux-arm64 linux-x86_64; do |
| 130 | + mkdir -p "npm/native/$target" |
| 131 | + install -m 755 "rc-artifacts/switchloom-native-$target/npm/native/$target/model-routing" \ |
| 132 | + "npm/native/$target/model-routing" |
| 133 | + cp "rc-artifacts/switchloom-native-$target/native-provenance/$target/provenance.json" \ |
| 134 | + "provenance-parts/$target.json" |
| 135 | + done |
| 136 | + git_sha="$(git rev-parse HEAD)" |
| 137 | + jq -s \ |
| 138 | + --arg package_version "$(jq -r .version package.json)" \ |
| 139 | + --arg git_sha "$git_sha" \ |
| 140 | + '{schema_version:"switchloom.native_provenance.v1",package_version:$package_version,git_sha:$git_sha,generated_by:"github-actions-release-candidate",targets:.}' \ |
| 141 | + provenance-parts/*.json > npm/native/provenance.json |
| 142 | + - name: Validate native provenance and npm package |
| 143 | + run: bash scripts/npm-pack-check.sh |
| 144 | + - name: Upload package provenance |
| 145 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 |
| 146 | + with: |
| 147 | + name: switchloom-native-provenance |
| 148 | + path: npm/native/provenance.json |
| 149 | + if-no-files-found: error |
0 commit comments