Release #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| release: | |
| types: [published] | |
| workflow_dispatch: | |
| inputs: | |
| version_tag: | |
| description: 'Git tag to release (e.g., 1.0.0 or 1.0.0-rc1)' | |
| required: true | |
| publish: | |
| description: 'Publish to NuGet (leave false for smoke run)' | |
| type: boolean | |
| required: false | |
| default: false | |
| env: | |
| DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1 | |
| DOTNET_NOLOGO: 1 | |
| jobs: | |
| validate-inputs: | |
| name: Validate Inputs | |
| runs-on: ubuntu-latest | |
| outputs: | |
| tag: ${{ steps.compute.outputs.tag }} | |
| version: ${{ steps.compute.outputs.version }} | |
| publish: ${{ steps.compute.outputs.publish }} | |
| steps: | |
| - id: compute | |
| name: Compute tag, version, and publish flag | |
| shell: bash | |
| run: | | |
| if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then | |
| TAG_INPUT="${{ github.event.inputs.version_tag }}" | |
| PUBLISH_INPUT="${{ github.event.inputs.publish }}" | |
| else | |
| TAG_INPUT="${{ github.ref_name }}" | |
| PUBLISH_INPUT="true" | |
| fi | |
| if [ -z "$TAG_INPUT" ]; then | |
| echo "Tag input is required." >&2 | |
| exit 1 | |
| fi | |
| if ! echo "$TAG_INPUT" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+(-[A-Za-z0-9.-]+)?$'; then | |
| echo "Tag must be a semantic version (e.g., 1.0.0 or 1.0.0-rc1)." >&2 | |
| exit 1 | |
| fi | |
| VER="$TAG_INPUT" | |
| echo "tag=$TAG_INPUT" >> $GITHUB_OUTPUT | |
| echo "version=$VER" >> $GITHUB_OUTPUT | |
| echo "publish=$PUBLISH_INPUT" >> $GITHUB_OUTPUT | |
| build-and-test: | |
| name: Build & Test (${{ matrix.name }}) | |
| runs-on: ${{ matrix.os }} | |
| needs: validate-inputs | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - name: ubuntu | |
| os: ubuntu-latest | |
| - name: windows | |
| os: windows-latest | |
| - name: macos | |
| os: macos-latest | |
| - name: centos | |
| os: ubuntu-latest | |
| container: quay.io/centos/centos:stream9 | |
| container: ${{ matrix.container }} | |
| steps: | |
| - name: Checkout master (smoke) | |
| if: needs.validate-inputs.outputs.publish != 'true' | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: master | |
| fetch-depth: 0 | |
| - name: Checkout tag | |
| if: needs.validate-inputs.outputs.publish == 'true' | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ needs.validate-inputs.outputs.tag }} | |
| fetch-depth: 0 | |
| - name: Setup .NET SDK | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: 8.0.x | |
| cache: false | |
| - name: Install prerequisites (CentOS) | |
| if: matrix.name == 'centos' | |
| run: | | |
| yum -y update | |
| yum -y install tar gzip ca-certificates krb5-libs libicu zlib openssl | |
| - name: Restore | |
| run: dotnet restore src/Couchbase.Analytics/Couchbase.Analytics.csproj | |
| - name: Build (Release) | |
| run: dotnet build src/Couchbase.Analytics/Couchbase.Analytics.csproj --configuration Release --no-restore | |
| - name: Test - Couchbase.Analytics.UnitTests (Release) | |
| run: dotnet test tests/Couchbase.Analytics.UnitTests/Couchbase.Analytics.UnitTests.csproj --configuration Release --logger trx --results-directory "TestResults" | |
| - name: Upload Test Results | |
| if: always() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: unit-test-results-${{ matrix.name }} | |
| path: TestResults | |
| pack: | |
| name: Pack (Windows) | |
| runs-on: windows-latest | |
| needs: [validate-inputs, build-and-test] | |
| env: | |
| NETSDK_SIGNKEY: ${{ secrets.NETSDK_SIGNKEY }} | |
| steps: | |
| - name: Checkout master (smoke) | |
| if: needs.validate-inputs.outputs.publish != 'true' | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: master | |
| fetch-depth: 0 | |
| - name: Checkout tag | |
| if: needs.validate-inputs.outputs.publish == 'true' | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ needs.validate-inputs.outputs.tag }} | |
| fetch-depth: 0 | |
| - name: Setup .NET SDK | |
| uses: actions/setup-dotnet@v4 | |
| with: | |
| dotnet-version: 8.0.x | |
| cache: false | |
| - name: Restore | |
| run: dotnet restore src/Couchbase.Analytics/Couchbase.Analytics.csproj | |
| - name: Prepare strong-name key (SNK) | |
| shell: pwsh | |
| run: | | |
| if ("${{ env.NETSDK_SIGNKEY }}" -eq '') { Write-Error "NETSDK_SIGNKEY secret is required"; exit 1 } | |
| $bytes = [System.Convert]::FromBase64String("${{ env.NETSDK_SIGNKEY }}") | |
| [IO.File]::WriteAllBytes("signkey.snk", $bytes) | |
| $signPath = (Resolve-Path "signkey.snk").Path | |
| "SIGNKEY_PATH=$signPath" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8 | |
| - name: Pack (Release, signed) | |
| shell: pwsh | |
| run: | | |
| dotnet pack src/Couchbase.Analytics/Couchbase.Analytics.csproj -c Release /p:ContinuousIntegrationBuild=true /p:Version="${{ needs.validate-inputs.outputs.tag }}" /p:IncludeSymbols=true /p:SymbolPackageFormat=snupkg /p:IncludeSource=true /p:SourceLinkCreate=true /p:SignAssembly=true /p:AssemblyOriginatorKeyFile="$env:SIGNKEY_PATH" | |
| - name: Upload Packages Artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: nuget-packages | |
| path: | | |
| src/Couchbase.Analytics/bin/Release/*.nupkg | |
| src/Couchbase.Analytics/bin/Release/*.snupkg | |
| publish: | |
| name: Publish to NuGet | |
| runs-on: windows-latest | |
| needs: [validate-inputs, pack] | |
| environment: nuget-publish | |
| # Only publish when publish flag is true | |
| if: needs.validate-inputs.outputs.publish == 'true' | |
| env: | |
| NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }} | |
| steps: | |
| - name: Download Packages Artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: nuget-packages | |
| path: ./artifacts | |
| - name: Publish to NuGet (nupkg) | |
| if: env.NUGET_API_KEY != '' | |
| shell: pwsh | |
| run: | | |
| $ver = "${{ needs.validate-inputs.outputs.tag }}" | |
| Get-ChildItem -Path ./artifacts -Recurse -Filter *.nupkg | Where-Object { $_.Name -like "*.$ver.nupkg" } | ForEach-Object { | |
| dotnet nuget push $_.FullName --source "https://api.nuget.org/v3/index.json" --api-key "${{ env.NUGET_API_KEY }}" --skip-duplicate | |
| } | |
| - name: Publish symbols to NuGet (snupkg) | |
| if: env.NUGET_API_KEY != '' | |
| shell: pwsh | |
| run: | | |
| $ver = "${{ needs.validate-inputs.outputs.tag }}" | |
| Get-ChildItem -Path ./artifacts -Recurse -Filter *.snupkg | Where-Object { $_.Name -like "*.$ver.snupkg" } | ForEach-Object { | |
| dotnet nuget push $_.FullName --source "https://api.nuget.org/v3/index.json" --api-key "${{ env.NUGET_API_KEY }}" --skip-duplicate | |
| } | |
| smoke-summary: | |
| name: Smoke Summary | |
| runs-on: ubuntu-latest | |
| needs: [validate-inputs, build-and-test, pack] | |
| if: github.event_name == 'workflow_dispatch' && github.event.inputs.publish != 'true' | |
| steps: | |
| - name: Download Packages Artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: nuget-packages | |
| path: ./artifacts | |
| - name: Download Test Results Artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| pattern: unit-test-results-* | |
| merge-multiple: true | |
| path: ./test-results | |
| - name: Print tag, package names, test result files | |
| shell: bash | |
| run: | | |
| echo "Tag: ${{ needs.validate-inputs.outputs.tag }}" | |
| echo "Package version: ${{ needs.validate-inputs.outputs.tag }}" | |
| echo "Packages:" | |
| find ./artifacts -type f -name "*.${{ needs.validate-inputs.outputs.tag }}.nupkg" -print | sed 's/^/ /' || true | |
| find ./artifacts -type f -name "*.${{ needs.validate-inputs.outputs.tag }}.snupkg" -print | sed 's/^/ /' || true | |
| echo "Test result files:" | |
| find ./test-results -type f -name "*.trx" -print | sed 's/^/ /' || true |