Release #36
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: 'Release' | |
| "on": workflow_dispatch | |
| permissions: | |
| contents: write | |
| id-token: write | |
| packages: write | |
| concurrency: | |
| group: '${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}' | |
| cancel-in-progress: true | |
| jobs: | |
| release: | |
| runs-on: ["ubuntu-latest"] | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - uses: nixbuild/nix-quick-install-action@v30 | |
| with: | |
| nix_conf: | | |
| keep-env-derivations = true | |
| keep-outputs = true | |
| - name: Restore and save Nix store | |
| uses: nix-community/cache-nix-action@v6 | |
| with: | |
| # restore and save a cache using this key | |
| primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }} | |
| # if there's no cache hit, restore a cache by this prefix | |
| restore-prefixes-first-match: nix-${{ runner.os }}- | |
| # collect garbage until the Nix store size (in bytes) is at most this number | |
| # before trying to save a new cache | |
| # 1G = 1073741824 | |
| gc-max-store-size-linux: 1G | |
| # do purge caches | |
| purge: true | |
| # purge all versions of the cache | |
| purge-prefixes: nix-${{ runner.os }}- | |
| # created more than this number of seconds ago | |
| purge-created: 0 | |
| # or, last accessed more than this number of seconds ago | |
| # relative to the start of the `Post Restore and save Nix store` phase | |
| purge-last-accessed: 0 | |
| # except any version with the key that is the same as the `primary-key` | |
| purge-primary-key: never | |
| - uses: HatsuneMiku3939/direnv-action@v1 | |
| - name: Log in to registry | |
| run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin | |
| - run: bazel run --config=release -c opt --embed_label="$(git describe --tags HEAD)" //blade:blade_push |