Update release pipelines to upload release artifacts

.github/workflows/build-appimage.yml

@@ -1,8 +1,11 @@
 name: Build AppImage
 on:
   push:
-    branches: [main]
+    branches:  
+    - main
   pull_request:
+    branches:
+    - "*"
 jobs:
   appimage:
     name: Build AppImage
@@ -17,7 +20,7 @@ jobs:
         docker cp temp:/app/burrow-gtk/build-appimage/Burrow-x86_64.AppImage .
         docker rm temp
     - uses: actions/upload-artifact@v4
+      name: Upload to GitHub
       with:
         name: AppImage
         path: Burrow-x86_64.AppImage
-

.github/workflows/build-apple.yml

@@ -1,4 +1,4 @@
-name: Apple Build
+name: Build Apple Apps
 on:
   push:
     branches:  
@@ -12,7 +12,7 @@ concurrency:
 jobs:
   build:
     name: Build App (${{ matrix.platform }})
-    runs-on: macos-13
+    runs-on: macos-14
     strategy:
       fail-fast: false
       matrix:
@@ -53,7 +53,6 @@ jobs:
     - name: Install Rust
       uses: dtolnay/rust-toolchain@stable
       with:
-        toolchain: stable
         targets: ${{ join(matrix.rust-targets, ', ') }}
     - name: Build
       id: build
@@ -64,7 +63,7 @@ jobs:
         app-store-key: ${{ secrets.APPSTORE_KEY }}
         app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
         app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
-    - name: Xcode Unit Test
+    - name: Run Unit Tests
       if: ${{ matrix.xcode-unit-test != '' }}
       continue-on-error: true
       uses: ./.github/actions/test-without-building
@@ -74,7 +73,7 @@ jobs:
         test-plan: ${{ matrix.xcode-unit-test }}
         artifact-prefix: unit-tests-${{ matrix.sdk-name }}
         check-name: Xcode Unit Tests (${{ matrix.platform }})
-    - name: Xcode UI Test
+    - name: Run UI Tests
       if: ${{ matrix.xcode-ui-test != '' }}
       continue-on-error: true
       uses: ./.github/actions/test-without-building

.github/workflows/build-docker.yml

@@ -33,6 +33,7 @@ jobs:
         images: ghcr.io/${{ github.repository }}
         tags: |
           type=sha
+          type=match,pattern=builds/(.*),group=1
           type=raw,value=latest,enable={{is_default_branch}}
     - name: Build and Push
       uses: docker/build-push-action@v4

.github/workflows/build-rpm.yml

@@ -1,10 +1,5 @@
+on: workflow_dispatch
 name: Build RPM
-on:
-  push:
-    branches: [ "main" ]
-  pull_request:
-    branches:
-    - "*"
 jobs:
   build:
     name: Build RPM
@@ -20,4 +15,3 @@ jobs:
         strip -s target/release/burrow
     - name: Build RPM
       run: cargo generate-rpm -p burrow
-

.github/workflows/build-rust.yml

@@ -1,4 +1,4 @@
-name: Rust Build
+name: Build Rust Crate
 on:
   push:
     branches:

.github/workflows/lint-git.yml

@@ -8,13 +8,14 @@ jobs:
     name: Git Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          fetch-depth: 0
-      - name: Install Gitlint
-        shell: bash
-        run: python -m pip install gitlint
-      - name: Run Gitlint
-        shell: bash
-        run: gitlint --commits "${{ github.event.pull_request.base.sha }}..HEAD"
+    - name: Checkout
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+        fetch-depth: 0
+    - name: Install
+      shell: bash
+      run: python -m pip install gitlint
+    - name: Lint
+      shell: bash
+      run: gitlint --commits "${{ github.event.pull_request.base.sha }}..HEAD"

.github/workflows/lint-swift.yml

@@ -1,8 +1,5 @@
 name: Swift Lint
 on:
-  push:
-    branches:
-    - main
   pull_request:
     branches:
     - "*"
@@ -14,8 +11,6 @@ jobs:
       image: ghcr.io/realm/swiftlint:latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v3
-      with:
-        ssh-key: ${{ secrets.DEPLOY_KEY }}
+      uses: actions/checkout@v4
     - name: Lint
       run: swiftlint lint --reporter github-actions-logging

.github/workflows/release-appimage.yml

@@ -0,0 +1,29 @@
+name: Release (AppImage)
+on:
+  release:
+    types:
+    - created
+jobs:
+  appimage:
+    name: Build AppImage
+    runs-on: ubuntu-latest
+    container: docker
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - name: Build
+      run: |
+        docker build -t appimage-builder . -f burrow-gtk/build-aux/Dockerfile
+        docker create --name temp appimage-builder
+        docker cp temp:/app/burrow-gtk/build-appimage/Burrow-x86_64.AppImage .
+        docker rm temp
+    - name: Upload to GitHub
+      uses: SierraSoftworks/gh-releases@v1.0.7
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        release_tag: ${{ github.ref_name }}
+        overwrite: 'true'
+        files: |
+          Burrow-x86_64.AppImage

.github/workflows/release-apple.yml

@@ -1,65 +1,115 @@
-name: Build Apple Release
+name: Release (Apple)
 on:
   release:
     types:
     - created
 jobs:
   build:
-    name: Build ${{ matrix.configuration['platform'] }} Release
-    runs-on: macos-13
+    name: Build ${{ matrix.platform }} Release
+    runs-on: macos-14
+    permissions:
+      contents: write
     strategy:
       fail-fast: false
       matrix:
-        configuration:
-        - scheme: App (iOS)
-          destination: generic/platform=iOS
+        include:
+        - destination: generic/platform=iOS
           platform: iOS
-          method: ad-hoc
-          artifact-file: Apple/Release/Burrow.ipa
-        - scheme: App (macOS)
-          destination: generic/platform=macOS
+          rust-targets:
+          - aarch64-apple-ios
+        - destination: generic/platform=macOS
           platform: macOS
-          method: mac-application
-          artifact-file: Burrow.app.txz
+          rust-targets:
+          - x86_64-apple-darwin
+          - aarch64-apple-darwin
     env:
       DEVELOPER_DIR: /Applications/Xcode_15.2.app/Contents/Developer
     steps:
     - name: Checkout
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
-        ssh-key: ${{ secrets.DEPLOY_KEY }}
-        submodules: recursive
+        fetch-depth: 0
     - name: Import Certificate
       uses: ./.github/actions/import-cert
       with:
         certificate: ${{ secrets.DEVELOPER_CERT }}
         password: ${{ secrets.DEVELOPER_CERT_PASSWORD }}
+    - name: Install Rust
+      uses: dtolnay/rust-toolchain@stable
+      with:
+        targets: ${{ join(matrix.rust-targets, ', ') }}
+    - name: Configure Version
+      shell: bash
+      run: Tools/version.sh
     - name: Archive
       uses: ./.github/actions/archive
       with:
-        scheme: ${{ matrix.configuration['scheme'] }}
-        destination: ${{ matrix.configuration['destination'] }}
+        scheme: App
+        destination: ${{ matrix.destination }}
         app-store-key: ${{ secrets.APPSTORE_KEY }}
         app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
         app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
         archive-path: Burrow.xcarchive
-    - name: Export Locally
+    - name: Notarize (macOS)
+      if: ${{ matrix.platform == 'macOS' }}
+      uses: ./.github/actions/notarize
+      with:
+        app-store-key: ${{ secrets.APPSTORE_KEY }}
+        app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
+        app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
+        archive-path: Burrow.xcarchive
+    - name: Export IPA (iOS)
+      if: ${{ matrix.platform == 'iOS' }}
       uses: ./.github/actions/export
       with:
-        method: ${{ matrix.configuration['method'] }}
+        method: ad-hoc
         destination: export
         app-store-key: ${{ secrets.APPSTORE_KEY }}
         app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
         app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
         archive-path: Burrow.xcarchive
         export-path: Release
-    - name: Compress
-      if: ${{ matrix.configuration['platform'] == 'macOS' }}
+    - name: Compress (iOS)
+      if: ${{ matrix.platform == 'iOS' }}
       shell: bash
-      run: tar --options xz:compression-level=9 -C Apple/Release -cJf Burrow.app.txz ./
-    - name: Attach Artifact
-      uses: SierraSoftworks/gh-releases@v1.0.6
+      run: |
+        cp Apple/Release/Burrow.ipa Burrow.ipa
+        aa archive -a lzma -b 8m -d Apple -subdir Burrow.xcarchive -o Burrow-${{ matrix.platform }}.xcarchive.aar
+        rm -rf Apple/Release
+    - name: Compress (macOS)
+      if: ${{ matrix.platform == 'macOS' }}
+      shell: bash
+      run: |
+        aa archive -a lzma -b 8m -d Apple/Release -subdir Burrow.app -o Burrow.app.aar
+        aa archive -a lzma -b 8m -d Apple -subdir Burrow.xcarchive -o Burrow-${{ matrix.platform }}.xcarchive.aar
+        rm -rf Apple/Release
+    - name: Upload to GitHub (iOS)
+      if: ${{ matrix.platform == 'iOS' }}
+      uses: SierraSoftworks/gh-releases@v1.0.7
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
-        overwrite: 'false'
-        files: ${{ matrix.configuration['artifact-file'] }}
+        release_tag: ${{ github.ref_name }}
+        overwrite: 'true'
+        files: |
+          Burrow.ipa 
+          Burrow-${{ matrix.platform }}.xcarchive.aar
+    - name: Upload to GitHub (macOS)
+      if: ${{ matrix.platform == 'macOS' }}
+      uses: SierraSoftworks/gh-releases@v1.0.7
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+        release_tag: ${{ github.ref_name }}
+        overwrite: 'true'
+        files: |
+          Burrow.aap.aar
+          Burrow-${{ matrix.platform }}.xcarchive.aar
+    - name: Upload to App Store Connect
+      uses: ./.github/actions/export
+      with:
+        method: app-store
+        destination: upload
+        app-store-key: ${{ secrets.APPSTORE_KEY }}
+        app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
+        app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
+        archive-path: Burrow.xcarchive
+        export-path: Release

.github/workflows/release-if-needed.yaml

@@ -0,0 +1,21 @@
+name: Create Release If Needed
+on:
+  workflow_dispatch:
+  schedule:
+  - cron: '0 10 * * *'
+concurrency:
+  group: ${{ github.workflow }}
+jobs:
+  create:
+    name: Create Release If Needed
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - shell: bash
+      run: |
+        if [[ $(Tools/version.sh status) == "dirty" ]]; then
+          gh workflow run release-now.yml
+        fi

.github/workflows/release-now.yml

@@ -0,0 +1,17 @@
+name: Create Release
+on: workflow_dispatch
+concurrency:
+  group: ${{ github.workflow }}
+jobs:
+  create:
+    env:
+      GH_TOKEN: ${{ secrets.GH_RELEASE_TOKEN }}
+    name: Create Release
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+    - shell: bash
+      run: Tools/version.sh increment