Update pipelines with various fixes

.github/actions/download-profiles/action.yml

@@ -0,0 +1,27 @@
+name: Download Provisioning Profiles
+inputs:
+  app-store-key:
+    description: App Store key in PEM PKCS#8 format
+    required: true
+  app-store-key-id:
+    description: App Store key ID
+    required: true
+  app-store-key-issuer-id:
+    description: App Store key issuer ID
+    required: true
+runs:
+  using: composite
+  steps:
+  - shell: bash
+    run: |
+      cat << EOF > api-key.json
+      {
+        "key_id": "${{ inputs.app-store-key-id }}",
+        "issuer_id": "${{ inputs.app-store-key-issuer-id }}",
+        "key": "${{ inputs.app-store-key }}"
+      }
+      EOF
+
+      fastlane sigh download_all --api_key_path api-key.json --download_xcode_profiles
+
+      rm -rf api-key.json

.github/workflows/build-appimage.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches:
     - "*"
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 jobs:
   appimage:
     name: Build AppImage

.github/workflows/build-docker.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches:
     - "*"
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
 jobs:
   build:
     name: Build Docker Image

.github/workflows/build-rust.yml

@@ -58,7 +58,7 @@ jobs:
       run: |
         sudo apt-get update
         sudo apt-get install -y ${{ join(matrix.packages, ' ') }}
-    - name: Install Windows Deps
+    - name: Configure LLVM
       if: matrix.os == 'windows-2022'
       shell: bash
       run: echo "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Tools\Llvm\x64\bin" >> $GITHUB_PATH

.github/workflows/lint-swift.yml

@@ -13,4 +13,4 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v4
     - name: Lint
-      run: swiftlint lint --reporter github-actions-logging
+      run: swiftlint lint --strict --reporter github-actions-logging

.github/workflows/release-appimage.yml

@@ -1,29 +0,0 @@
-name: Release (AppImage)
-on:
-  release:
-    types:
-    - created
-jobs:
-  appimage:
-    name: Build AppImage
-    runs-on: ubuntu-latest
-    container: docker
-    steps:
-    - name: Checkout
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - name: Build
-      run: |
-        docker build -t appimage-builder . -f burrow-gtk/build-aux/Dockerfile
-        docker create --name temp appimage-builder
-        docker cp temp:/app/burrow-gtk/build-appimage/Burrow-x86_64.AppImage .
-        docker rm temp
-    - name: Upload to GitHub
-      uses: SierraSoftworks/gh-releases@v1.0.7
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
-        release_tag: ${{ github.ref_name }}
-        overwrite: 'true'
-        files: |
-          Burrow-x86_64.AppImage

.github/workflows/release-apple.yml

@@ -24,12 +24,18 @@ jobs:
           - x86_64-apple-darwin
           - aarch64-apple-darwin
     env:
-      DEVELOPER_DIR: /Applications/Xcode_15.4.app/Contents/Developer
+      DEVELOPER_DIR: /Applications/Xcode_16.0.app/Contents/Developer
     steps:
     - name: Checkout
       uses: actions/checkout@v4
       with:
         fetch-depth: 0
+    - name: Download Provisioning Profiles
+      uses: ./.github/actions/download-profiles
+      with:
+        app-store-key: ${{ secrets.APPSTORE_KEY }}
+        app-store-key-id: ${{ secrets.APPSTORE_KEY_ID }}
+        app-store-key-issuer-id: ${{ secrets.APPSTORE_KEY_ISSUER_ID }}
     - name: Import Certificate
       uses: ./.github/actions/import-cert
       with:
@@ -40,8 +46,9 @@ jobs:
       with:
         targets: ${{ join(matrix.rust-targets, ', ') }}
     - name: Configure Version
+      id: version
       shell: bash
-      run: Tools/version.sh
+      run: echo "BUILD_NUMBER=$(Tools/version.sh)" >> $GITHUB_OUTPUT
     - name: Archive
       uses: ./.github/actions/archive
       with:

.github/workflows/release-if-needed.yaml

@@ -9,6 +9,8 @@ jobs:
   create:
     name: Create Release If Needed
     runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ github.token }}
     steps:
     - name: Checkout
       uses: actions/checkout@v4

.github/workflows/release-linux.yml

@@ -19,16 +19,11 @@ jobs:
         docker create --name temp appimage-builder
         docker cp temp:/app/burrow-gtk/build-appimage/Burrow-x86_64.AppImage .
         docker rm temp
-      - name: Get Build Number
-        id: version
-        shell: bash
-        run: |
-          echo "BUILD_NUMBER=$(Tools/version.sh)" >> $GITHUB_OUTPUT
     - name: Attach Artifacts
       uses: SierraSoftworks/gh-releases@v1.0.7
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
-          release_tag: builds/${{ steps.version.outputs.BUILD_NUMBER }}
+        release_tag: ${{ github.ref_name }}
         overwrite: "true"
         files: |
           Burrow-x86_64.AppImage