hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Use workflow inputs for store upload gates
Some checks failed
Build Site / Next.js Build (push) Waiting to run
Details
Lint Governance / BEP Metadata (push) Waiting to run
Details
Build Rust / Cargo Test (push) Has been cancelled
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-06-07 19:04:22 -07:00
parent 86a60371d6
commit 02b7509eaf
1 changed files with 25 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

50
.forgejo/workflows/publish-store-uploads.yml
View file

@ -48,7 +48,7 @@ permissions:
contents: read contents: read
concurrency: concurrency:
group: burrow-publish-store-uploads-${{ github.event.inputs.build_number }} group: burrow-publish-store-uploads-${{ inputs.build_number }}
cancel-in-progress: true cancel-in-progress: true
env: env:
@ -81,7 +81,7 @@ env:
jobs: jobs:
sign-apple-kms: sign-apple-kms:
name: Sign (Apple KMS) name: Sign (Apple KMS)
if: ${{ github.event.inputs.upload_app_store == 'true' || github.event.inputs.upload_sparkle == 'true' }} if: ${{ inputs.upload_app_store == 'true' || inputs.upload_sparkle == 'true' }}
runs-on: namespace-profile-linux-medium runs-on: namespace-profile-linux-medium
steps: steps:
- name: Checkout - name: Checkout
@ -110,7 +110,7 @@ jobs:
- name: Download Staged Apple Artifacts - name: Download Staged Apple Artifacts
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
run: | run: |
set -euo pipefail set -euo pipefail
nix develop .#ci -c Scripts/ci/google-wif-auth.sh nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@ -125,8 +125,8 @@ jobs:
- name: Sign Apple Artifacts With KMS - name: Sign Apple Artifacts With KMS
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
SPARKLE_CHANNEL_INPUT: ${{ github.event.inputs.sparkle_channel }} SPARKLE_CHANNEL_INPUT: ${{ inputs.sparkle_channel }}
run: | run: |
set -euo pipefail set -euo pipefail
channel="${SPARKLE_CHANNEL_INPUT:-}" channel="${SPARKLE_CHANNEL_INPUT:-}"
@ -138,13 +138,13 @@ jobs:
- name: Upload Signed Apple Artifacts - name: Upload Signed Apple Artifacts
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
run: nix develop .#ci -c Scripts/ci/upload-release-storage.sh run: nix develop .#ci -c Scripts/ci/upload-release-storage.sh
upload-app-store: upload-app-store:
name: Upload (App Store Connect) name: Upload (App Store Connect)
needs: sign-apple-kms needs: sign-apple-kms
if: ${{ github.event.inputs.upload_app_store == 'true' }} if: ${{ inputs.upload_app_store == 'true' }}
runs-on: namespace-profile-macos-large runs-on: namespace-profile-macos-large
steps: steps:
- name: Checkout - name: Checkout
@ -173,7 +173,7 @@ jobs:
- name: Download Apple Artifacts From GCS - name: Download Apple Artifacts From GCS
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
run: | run: |
set -euo pipefail set -euo pipefail
nix develop .#ci -c Scripts/ci/google-wif-auth.sh nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@ -204,7 +204,7 @@ jobs:
artifacts+=("$artifact") artifacts+=("$artifact")
done done
if (( ${#artifacts[@]} == 0 )); then if (( ${#artifacts[@]} == 0 )); then
echo "::error ::No Apple upload artifacts found for build ${{ github.event.inputs.build_number }}." echo "::error ::No Apple upload artifacts found for build ${{ inputs.build_number }}."
exit 1 exit 1
fi fi
for artifact in "${artifacts[@]}"; do for artifact in "${artifacts[@]}"; do
@ -222,7 +222,7 @@ jobs:
release-ios-testflight: release-ios-testflight:
name: Release (TestFlight iOS Testers) name: Release (TestFlight iOS Testers)
needs: upload-app-store needs: upload-app-store
if: ${{ github.event.inputs.upload_app_store == 'true' }} if: ${{ inputs.upload_app_store == 'true' }}
runs-on: namespace-profile-linux-medium runs-on: namespace-profile-linux-medium
steps: steps:
- name: Checkout - name: Checkout
@ -251,16 +251,16 @@ jobs:
- name: Distribute iOS Build To TestFlight - name: Distribute iOS Build To TestFlight
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ github.event.inputs.testflight_distribute_external || 'false' }} TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ inputs.testflight_distribute_external || 'false' }}
TESTFLIGHT_GROUPS: ${{ github.event.inputs.testflight_groups || '' }} TESTFLIGHT_GROUPS: ${{ inputs.testflight_groups || '' }}
TESTFLIGHT_INTERNAL_GROUP: Internal TESTFLIGHT_INTERNAL_GROUP: Internal
IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ github.event.inputs.ios_uses_non_exempt_encryption || 'false' }} IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ inputs.ios_uses_non_exempt_encryption || 'false' }}
run: Scripts/ci/distribute-testflight.sh run: Scripts/ci/distribute-testflight.sh
distribute-ios-testflight: distribute-ios-testflight:
name: Distribute (TestFlight iOS Testers) name: Distribute (TestFlight iOS Testers)
if: ${{ github.event.inputs.upload_app_store != 'true' && github.event.inputs.distribute_testflight == 'true' }} if: ${{ inputs.upload_app_store != 'true' && inputs.distribute_testflight == 'true' }}
runs-on: namespace-profile-linux-medium runs-on: namespace-profile-linux-medium
steps: steps:
- name: Checkout - name: Checkout
@ -289,17 +289,17 @@ jobs:
- name: Distribute iOS Build To TestFlight - name: Distribute iOS Build To TestFlight
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ github.event.inputs.testflight_distribute_external || 'false' }} TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ inputs.testflight_distribute_external || 'false' }}
TESTFLIGHT_GROUPS: ${{ github.event.inputs.testflight_groups || '' }} TESTFLIGHT_GROUPS: ${{ inputs.testflight_groups || '' }}
TESTFLIGHT_INTERNAL_GROUP: Internal TESTFLIGHT_INTERNAL_GROUP: Internal
IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ github.event.inputs.ios_uses_non_exempt_encryption || 'false' }} IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ inputs.ios_uses_non_exempt_encryption || 'false' }}
run: Scripts/ci/distribute-testflight.sh run: Scripts/ci/distribute-testflight.sh
upload-sparkle: upload-sparkle:
name: Upload (Sparkle) name: Upload (Sparkle)
needs: sign-apple-kms needs: sign-apple-kms
if: ${{ github.event.inputs.upload_sparkle == 'true' }} if: ${{ inputs.upload_sparkle == 'true' }}
runs-on: namespace-profile-linux-medium runs-on: namespace-profile-linux-medium
steps: steps:
- name: Checkout - name: Checkout
@ -312,10 +312,10 @@ jobs:
id: channel id: channel
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
run: | run: |
set -euo pipefail set -euo pipefail
channel="${{ github.event.inputs.sparkle_channel }}" channel="${{ inputs.sparkle_channel }}"
if [[ -z "$channel" ]]; then if [[ -z "$channel" ]]; then
channel="build-${BUILD_NUMBER}" channel="build-${BUILD_NUMBER}"
fi fi
@ -328,9 +328,9 @@ jobs:
- name: Publish Sparkle Channel - name: Publish Sparkle Channel
shell: bash shell: bash
env: env:
BUILD_NUMBER: ${{ github.event.inputs.build_number }} BUILD_NUMBER: ${{ inputs.build_number }}
CHANNEL: ${{ steps.channel.outputs.channel }} CHANNEL: ${{ steps.channel.outputs.channel }}
SPARKLE_POINT_MAIN: ${{ github.event.inputs.sparkle_point_main }} SPARKLE_POINT_MAIN: ${{ inputs.sparkle_point_main }}
run: | run: |
set -euo pipefail set -euo pipefail
nix develop .#ci -c Scripts/ci/google-wif-auth.sh nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@ -351,7 +351,7 @@ jobs:
upload-microsoft-store: upload-microsoft-store:
name: Upload (Microsoft Store Beta) name: Upload (Microsoft Store Beta)
if: ${{ github.event.inputs.upload_microsoft_store == 'true' }} if: ${{ inputs.upload_microsoft_store == 'true' }}
runs-on: namespace-profile-windows-large runs-on: namespace-profile-windows-large
steps: steps:
- name: Checkout - name: Checkout