More workflow changes.

Author: redvers

.github/workflows/announce-a-release.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           entrypoint: publish-release-notes-to-github
         env:
-          RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          RELEASE_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 #     - name: Zulip
 #       uses: docker://ghcr.io/ponylang/release-bot-action:0.6.3
 #       with:

.github/workflows/main.yml

@@ -6,6 +6,9 @@ concurrency:
   group: pr-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  packages: read
+
 jobs:
   superlinter:
     name: Lint bash, docker, markdown, and yaml
@@ -22,22 +25,6 @@ jobs:
           VALIDATE_MD: true
           VALIDATE_YAML: true
 
-# lint-python-commands:
-#   name: Lint python commands
-#   runs-on: ubuntu-latest
-#   steps:
-#     - uses: actions/checkout@v4.1.1
-#     - name: pylint
-#       run: make pylint
-
-# validate-docker-image-builds:
-#   name: Validate Docker image builds
-#   runs-on: ubuntu-latest
-#   steps:
-#     - uses: actions/checkout@v4.1.1
-#     - name: Docker build
-#       run: "docker build --pull ."
-
   verify-changelog:
     name: Verify CHANGELOG is valid
     runs-on: ubuntu-latest
@@ -47,3 +34,20 @@ jobs:
         uses: docker://ghcr.io/ponylang/changelog-tool:release
         with:
           args: changelog-tool verify
+
+  test-static:
+    name: Test Alpine Static Generation
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/redvers/pony-dependency-builder:latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+      - name: Build
+        run: echo ${{ github.sha }} > Release.txt
+      - name: Test
+        run: cat Release.txt
+      - name: alpine specific
+        run: echo 'use "lib:lzma"' > alpine.pony
+      - name: build-binary
+        run: make static

.github/workflows/pr.yml

@@ -7,6 +7,10 @@ on:
 
 concurrency: prepare-for-a-release
 
+permissions:
+  packages: read
+  contents: write
+
 jobs:
   # all tasks that need to be done before we add an X.Y.Z tag
   # should be done as a step in the pre-tagging job.
@@ -49,14 +53,6 @@ jobs:
         env:
           GIT_USER_NAME: "redvers"
           GIT_USER_EMAIL: "red@contact.red"
-#     - name: Switch to using prebuilt docker image to run
-#       uses: docker://ghcr.io/ponylang/release-bot-action:0.6.3
-#       with:
-#         entrypoint: update-action-to-use-docker-image-to-run-action
-#       env:
-#         GIT_USER_NAME: "redvers"
-#         GIT_USER_EMAIL: "red@contact.red"
-#         REGISTRY: "ghcr.io"
 
   # tag for release
   # this will kick off the next stage of the release process
@@ -104,10 +100,3 @@ jobs:
         env:
           GIT_USER_NAME: "redvers"
           GIT_USER_EMAIL: "red@contact.red"
-#     - name: Switch to building action for each run
-#       uses: docker://ghcr.io/ponylang/release-bot-action:0.6.3
-#       with:
-#         entrypoint: update-action-to-use-dockerfile-to-run-action
-#       env:
-#         GIT_USER_NAME: "redvers"
-#         GIT_USER_EMAIL: "red@contact.red"

.github/workflows/prepare-for-a-release.yml

@@ -0,0 +1,69 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+
+concurrency: release
+
+permissions:
+  contents: read
+  id-token: write
+  packages: read
+
+jobs:
+  pre-artefact-creation:
+  name: Tasks to run before artefact creation
+  runs-on: ubuntu-latest
+  steps:
+    - name: Checkout main
+      uses: actions/checkout@v4.1.1
+      with:
+        ref: "main"
+        token: ${{ secrets.RELEASE_TOKEN }}
+    - name: Validate CHANGELOG
+      uses: docker://ghcr.io/ponylang/release-bot-action:0.6.3
+      with:
+        entrypoint: pre-artefact-changelog-check
+
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/redvers/pony-dependency-builder:latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+      - name: Build
+        run: echo ${{ github.sha }} > Release.txt
+      - name: Test
+        run: cat Release.txt
+      - name: alpine specific
+        run: echo 'use "lib:lzma"' > alpine.pony
+      - name: build-binary
+        run: make static
+      - name: Release
+        uses: softprops/action-gh-release@v2
+        if: github.ref_type == 'tag'
+        with:
+          files: |
+            jndi-file-scanner
+            Release.txt
+
+  trigger-release-announcement:
+    name: Trigger release announcement
+    runs-on: ubuntu-latest
+    needs:
+      - build
+    steps:
+      - uses: actions/checkout@v4.1.1
+        with:
+          ref: "main"
+          token: ${{ secrets.RELEASE_TOKEN }}
+      - name: Trigger
+        uses: docker://ghcr.io/ponylang/release-bot-action:0.6.3
+        with:
+          entrypoint: trigger-release-announcement
+        env:
+          GIT_USER_NAME: "redvers"
+          GIT_USER_EMAIL: "red@contact.red"

.github/workflows/release.yml

@@ -0,0 +1,3 @@
+## Added Static Builds by Github Workflows
+
+Github workflows now generate a static binary which should be usable on any Linux distribution.

.release-notes/0.1.3.md

@@ -1,7 +1,3 @@
 ## Workflow Updates for Releases
 
 Many many release iterations to get the changelog-bot rotating appropriately.
-## Added Static Builds by Github Workflows
-
-Github workflows now generate a static binary which should be usable on any Linux distribution.
-