products/.github/workflows/bff-release.yml at e83217703aa429302cf43d7b4a37f3183f5530ef · DuendeSoftware/products · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
# This was generated by tool. Edits will be overwritten.

name: bff/release
on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version in format X.Y.Z or X.Y.Z-{alpha,beta,preview,rc}.N'
        type: string
        required: true
        default: '0.0.0'
      branch:
        description: '(Optional) the name of the branch to release from'
        type: string
        required: false
        default: 'main'
      remove-tag-if-exists:
        description: 'If set, will remove the existing tag. Use this if you have issues with the previous release action'
        type: boolean
        required: false
        default: false
env:
  DOTNET_NOLOGO: true
  DOTNET_CLI_TELEMETRY_OPTOUT: true
jobs:
  tag:
    name: Tag and Pack
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
    defaults:
      run:
        shell: bash
        working-directory: bff
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: Validate Version Input
      run: echo '${{ github.event.inputs.version }}' | grep -P '^\d+\.\d+\.\d+(-(?:alpha|beta|preview|rc)\.\d+)?$' || (echo 'Invalid version format' && exit 1)
    - name: Checkout target branch
      if: github.event.inputs.branch != 'main'
      run: git checkout ${{ github.event.inputs.branch }}
    - name: Git Config
      run: >-
        git config --global user.email "github-bot@duendesoftware.com"

        git config --global user.name "Duende Software GitHub Bot"
    - name: Git Config
      if: github.event.inputs['remove-tag-if-exists'] == 'true'
      run: >-
        if git rev-parse bff-${{ github.event.inputs.version }} >/dev/null 2>&1; then
          git tag -d bff-${{ github.event.inputs.version }}
          git push --delete origin bff-${{ github.event.inputs.version }}
        else
          echo 'Tag bff-${{ github.event.inputs.version }} does not exist.'
        fi
    - name: Git Config
      run: >-
        git tag -a bff-${{ github.event.inputs.version }} -m "Release v${{ github.event.inputs.version }}"

        git push origin bff-${{ github.event.inputs.version }}
    - name: List .net sdks
      run: dotnet --list-sdks
    - name: Setup Dotnet
      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25
      with:
        dotnet-version: 10.0.100
    - name: Pack bff.slnf
      run: dotnet pack -c Release bff.slnf -o artifacts
    - name: Tool restore
      run: dotnet tool restore
    - name: Sign packages
      run: >-
        for file in artifacts/*.nupkg; do
           dotnet NuGetKeyVaultSignTool sign "$file" --file-digest sha256 --timestamp-rfc3161 http://timestamp.digicert.com --azure-key-vault-url https://duendecodesigninghsm.vault.azure.net/ --azure-key-vault-client-id 18e3de68-2556-4345-8076-a46fad79e474 --azure-key-vault-tenant-id ed3089f0-5401-4758-90eb-066124e2d907 --azure-key-vault-client-secret ${{ secrets.SignClientSecret }} --azure-key-vault-certificate NuGetPackageSigning
        done
    - name: Push packages to GitHub
      run: dotnet nuget push artifacts/*.nupkg --source https://nuget.pkg.github.com/DuendeSoftware/index.json --api-key ${{ secrets.GITHUB_TOKEN }} --skip-duplicate
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        NUGET_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    - name: Upload Artifacts
      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
      with:
        name: artifacts
        path: bff/artifacts/*.nupkg
        overwrite: true
        retention-days: 15
  publish:
    name: Publish to nuget.org
    needs:
    - tag
    runs-on: ubuntu-latest
    environment:
      name: nuget.org
    steps:
    - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
      with:
        name: artifacts
        path: artifacts
    - name: List .net sdks
      run: dotnet --list-sdks
    - name: Setup Dotnet
      uses: actions/setup-dotnet@3e891b0cb619bf60e2c25674b222b8940e2c1c25
      with:
        dotnet-version: 10.0.100
    - name: List files
      run: tree
      shell: bash
    - name: Push packages to nuget.org
      run: dotnet nuget push artifacts/*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET_ORG_API_KEY }} --skip-duplicate