🐛 Recognize variable font named instances https://github.com/siyu… #464
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CD For SiYuan | |
| on: | |
| push: | |
| tags: | |
| - '*-alpha*' | |
| - '*-beta*' | |
| - '*-rc*' | |
| workflow_dispatch: | |
| env: | |
| package_json: "app/package.json" | |
| jobs: | |
| prepare: | |
| name: Prepare | |
| runs-on: ubuntu-latest | |
| outputs: | |
| release_title: ${{ steps.release_info.outputs.release_title }} | |
| version: ${{ steps.version.outputs.value }} | |
| packageManager: ${{ steps.packageManager.outputs.value }} | |
| release_body: ${{ steps.release_info.outputs.release_body }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v6 | |
| - name: Setup Python | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: "3.11" | |
| - run: pip install PyGithub | |
| - id: thisLatestRelease | |
| run: | | |
| LATEST=$(gh api "repos/${{ github.repository }}/releases/latest" --jq '.tag_name' 2>/dev/null || echo "") | |
| echo "release=$LATEST" >> $GITHUB_OUTPUT | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Extract version from package.json | |
| id: version | |
| run: | | |
| echo "value=$(jq .version ${{ env.package_json }} -r)" >> $GITHUB_OUTPUT | |
| - name: Verify tag matches package.json version | |
| # 仅 tag 推送触发时校验：去掉 tag 前导 v 后与 package.json 中的版本号比对， | |
| # 不一致说明开发者推 tag 前忘记同步版本号，直接终止整个流程。 | |
| if: startsWith(github.ref, 'refs/tags/') | |
| run: | | |
| TAG="${GITHUB_REF_NAME#v}" | |
| VERSION="${{ steps.version.outputs.value }}" | |
| if [ "$TAG" != "$VERSION" ]; then | |
| echo "Tag (v$TAG) does not match version in package.json ($VERSION), stopping" | |
| exit 1 | |
| fi | |
| echo "Tag matches version: $TAG" | |
| - name: Extract electronVersion from package.json | |
| id: electronVersion | |
| run: | | |
| echo "value=$(jq .devDependencies.electron ${{ env.package_json }} -r)" >> $GITHUB_OUTPUT | |
| - name: Extract packageManager from package.json | |
| id: packageManager | |
| run: | | |
| echo "value=$(jq .packageManager ${{ env.package_json }} -r)" >> $GITHUB_OUTPUT | |
| - name: Gather Release Information | |
| id: release_info | |
| run: | | |
| echo "release_title=SiYuan v${{ steps.version.outputs.value }}" >> $GITHUB_OUTPUT | |
| changelog_header=$(python scripts/parse-changelog-HEAD.py -t ${{ github.ref }} -b ${{ steps.thisLatestRelease.outputs.release }} -e ${{ steps.electronVersion.outputs.value }} ${{ github.repository }}) | |
| changelog=$(python scripts/parse-changelog.py -t ${{ github.ref }} ${{ github.repository }}) | |
| EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64) | |
| echo "release_body<<$EOF" >> $GITHUB_OUTPUT | |
| echo "$changelog_header" >> $GITHUB_OUTPUT | |
| echo "$changelog" >> $GITHUB_OUTPUT | |
| echo "$EOF" >> $GITHUB_OUTPUT | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| build: | |
| runs-on: ${{ matrix.config.os }} | |
| name: ${{ matrix.config.name }} | |
| needs: [prepare] | |
| env: | |
| SIYUAN_E2E_SHARDS: "main:6806 editor:6807 attribute-view:6808" | |
| strategy: | |
| matrix: | |
| config: | |
| - os: ubuntu-24.04 | |
| name: ubuntu build linux | |
| kernel_path: "../app/kernel-linux/SiYuan-Kernel" | |
| build_args_prefix: "-s -w -X" | |
| build_args_suffix: "Mode=prod" | |
| electron_args: "dist-linux" | |
| goos: "linux" | |
| goarch: "amd64" | |
| suffix: "linux" | |
| - os: macos-latest | |
| name: macos build mac.dmg | |
| kernel_path: "../app/kernel-darwin/SiYuan-Kernel" | |
| build_args_prefix: "-s -w -X" | |
| build_args_suffix: "Mode=prod" | |
| electron_args: "dist-darwin" | |
| goos: "darwin" | |
| goarch: "amd64" | |
| suffix: "mac.dmg" | |
| - os: macos-latest | |
| name: macos build mac-arm64.dmg | |
| kernel_path: "../app/kernel-darwin-arm64/SiYuan-Kernel" | |
| build_args_prefix: "-s -w -X" | |
| build_args_suffix: "Mode=prod" | |
| electron_args: "dist-darwin-arm64" | |
| goos: "darwin" | |
| goarch: "arm64" | |
| suffix: "mac-arm64.dmg" | |
| - os: windows-latest | |
| name: windows build win.exe | |
| kernel_path: "../app/kernel/SiYuan-Kernel.exe" | |
| build_args_prefix: "-s -w -X" | |
| build_args_suffix: "Mode=prod" | |
| electron_args: "dist" | |
| goos: "windows" | |
| gobin: "bin" | |
| mingwsys: "MINGW64" | |
| goarch: "amd64" | |
| suffix: "win.exe" | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| path: ${{ github.workspace }}/go/src/github.com/${{ github.repository }} | |
| - name: Set up MingGW | |
| uses: msys2/setup-msys2@v2 | |
| if: "contains( matrix.config.goos, 'windows')" | |
| with: | |
| install: p7zip mingw-w64-x86_64-lua | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel/go.mod | |
| cache-dependency-path: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel/go.sum | |
| cache: true | |
| - run: go version | |
| - name: Set up goversioninfo | |
| run: go get github.com/josephspurrier/goversioninfo/cmd/goversioninfo && go install github.com/josephspurrier/goversioninfo/cmd/goversioninfo | |
| if: "contains( matrix.config.goos, 'windows')" | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel | |
| env: | |
| GO111MODULE: on | |
| CGO_ENABLED: 1 | |
| GOOS: ${{ matrix.config.goos }} | |
| GOPATH: ${{ github.workspace }}/go | |
| GOARCH: ${{ matrix.config.goarch }} | |
| - name: Set up Node | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: 24 | |
| - name: Install Node pnpm | |
| run: npm install -g ${{ needs.prepare.outputs.packageManager }} | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Cache pnpm store | |
| uses: actions/cache@v5 | |
| with: | |
| path: ~/.pnpm-store | |
| key: pnpm-${{ runner.os }}-${{ hashFiles('app/pnpm-lock.yaml') }} | |
| restore-keys: pnpm-${{ runner.os }}- | |
| - name: Install Node Dependencies | |
| run: pnpm install --no-frozen-lockfile | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Install Electron Binary | |
| run: pnpm run install:electron | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Building UI | |
| run: pnpm run build | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Clean Build and Kernel Directories | |
| run: | | |
| rm -rf "${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build" | |
| rm -rf "${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/kernel"* | |
| shell: bash | |
| - name: Generate Icon Resource and Properties/Version Info For Windows | |
| run: ${{ github.workspace }}\go\${{ matrix.config.gobin }}\goversioninfo -platform-specific=true -icon="resource\icon.ico" -manifest="resource\goversioninfo.exe.manifest" | |
| if: "contains( matrix.config.goos, 'windows')" | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel | |
| - name: Building Kernel | |
| run: go build -tags "fts5 sqlcipher" -o "${{ matrix.config.kernel_path }}" -ldflags "${{ matrix.config.build_args_prefix }} github.com/${{ github.repository }}/kernel/util.${{ matrix.config.build_args_suffix }}" | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel | |
| env: | |
| GO111MODULE: on | |
| CGO_ENABLED: 1 | |
| GOOS: ${{ matrix.config.goos }} | |
| GOPATH: ${{ github.workspace }}/go | |
| GOARCH: ${{ matrix.config.goarch }} | |
| - name: Checkout siyuan-testing | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| uses: actions/checkout@v6 | |
| with: | |
| repository: siyuan-note/siyuan-testing | |
| ref: main | |
| path: ${{ github.workspace }}/siyuan-testing | |
| - name: Install End-to-End Test Dependencies | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| run: pnpm install --frozen-lockfile | |
| working-directory: ${{ github.workspace }}/siyuan-testing | |
| - name: Validate End-to-End Test Shards | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| run: | | |
| pnpm run typecheck | |
| pnpm run test:shards | |
| working-directory: ${{ github.workspace }}/siyuan-testing | |
| - name: Start Kernel for End-to-End Tests | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| shell: bash | |
| run: | | |
| APP_DIR="${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app" | |
| KERNEL_PATH="${APP_DIR}/kernel-darwin-arm64/SiYuan-Kernel" | |
| for shard_config in ${SIYUAN_E2E_SHARDS}; do | |
| shard="${shard_config%:*}" | |
| port="${shard_config#*:}" | |
| workspace="${RUNNER_TEMP}/siyuan-e2e-${shard}-workspace" | |
| mkdir -p "${workspace}" | |
| "${KERNEL_PATH}" --workspace="${workspace}" serve --wd="${APP_DIR}" --port="${port}" \ | |
| > "${RUNNER_TEMP}/siyuan-e2e-${shard}-kernel-console.log" 2>&1 & | |
| echo "$!" > "${RUNNER_TEMP}/siyuan-e2e-${shard}-kernel.pid" | |
| done | |
| - name: Wait for End-to-End Test Kernels | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| shell: bash | |
| run: | | |
| wait_for_kernel() { | |
| local pid="$1" | |
| local port="$2" | |
| local log_path="$3" | |
| for attempt in {1..60}; do | |
| if curl --fail --silent --request POST "http://127.0.0.1:${port}/api/system/getWorkspaceInfo" > /dev/null; then | |
| return | |
| fi | |
| if ! kill -0 "${pid}" 2>/dev/null; then | |
| cat "${log_path}" | |
| return 1 | |
| fi | |
| sleep 1 | |
| done | |
| cat "${log_path}" | |
| return 1 | |
| } | |
| for shard_config in ${SIYUAN_E2E_SHARDS}; do | |
| shard="${shard_config%:*}" | |
| port="${shard_config#*:}" | |
| pid="$(cat "${RUNNER_TEMP}/siyuan-e2e-${shard}-kernel.pid")" | |
| wait_for_kernel "${pid}" "${port}" \ | |
| "${RUNNER_TEMP}/siyuan-e2e-${shard}-kernel-console.log" | |
| done | |
| - name: Run End-to-End Tests | |
| if: matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| timeout-minutes: 30 | |
| shell: bash | |
| run: | | |
| TEST_PIDS=() | |
| TEST_SHARDS=() | |
| for shard_config in ${SIYUAN_E2E_SHARDS}; do | |
| shard="${shard_config%:*}" | |
| port="${shard_config#*:}" | |
| workspace="${RUNNER_TEMP}/siyuan-e2e-${shard}-workspace" | |
| ( | |
| SIYUAN_BASE_URL="http://127.0.0.1:${port}" \ | |
| SIYUAN_EXPECT_WORKSPACE="${workspace}" \ | |
| SIYUAN_E2E_SHARD="${shard}" \ | |
| SIYUAN_TEST_RESULTS_DIR="test-results-${shard}" \ | |
| PLAYWRIGHT_HTML_OUTPUT_DIR="playwright-report-${shard}" \ | |
| pnpm exec playwright test --config=playwright.focused.config.ts \ | |
| --reporter=line,html --output="test-results-${shard}" | |
| ) & | |
| TEST_PIDS+=("$!") | |
| TEST_SHARDS+=("${shard}") | |
| done | |
| TEST_STATUS=0 | |
| set +e | |
| for index in "${!TEST_PIDS[@]}"; do | |
| wait "${TEST_PIDS[${index}]}" | |
| shard_status=$? | |
| if [ "${shard_status}" -ne 0 ]; then | |
| echo "::error title=End-to-End shard failed::${TEST_SHARDS[${index}]} exited with ${shard_status}" | |
| TEST_STATUS=1 | |
| fi | |
| done | |
| set -e | |
| exit "${TEST_STATUS}" | |
| working-directory: ${{ github.workspace }}/siyuan-testing | |
| - name: Stop End-to-End Test Kernels | |
| if: always() && matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| shell: bash | |
| run: | | |
| stop_kernel() { | |
| local pid="$1" | |
| if [ -z "${pid}" ] || ! kill -0 "${pid}" 2>/dev/null; then | |
| return | |
| fi | |
| kill -TERM "${pid}" | |
| for attempt in {1..30}; do | |
| if ! kill -0 "${pid}" 2>/dev/null; then | |
| return | |
| fi | |
| sleep 1 | |
| done | |
| kill -KILL "${pid}" | |
| } | |
| for shard_config in ${SIYUAN_E2E_SHARDS}; do | |
| shard="${shard_config%:*}" | |
| pid_path="${RUNNER_TEMP}/siyuan-e2e-${shard}-kernel.pid" | |
| if [ -f "${pid_path}" ]; then | |
| stop_kernel "$(cat "${pid_path}")" | |
| fi | |
| done | |
| - name: Upload End-to-End Test Results | |
| if: always() && matrix.config.goos == 'darwin' && matrix.config.goarch == 'arm64' | |
| continue-on-error: true | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: siyuan-e2e-macos-arm64 | |
| path: | | |
| ${{ github.workspace }}/siyuan-testing/playwright-report-* | |
| ${{ github.workspace }}/siyuan-testing/test-results-* | |
| ${{ runner.temp }}/siyuan-e2e-*-kernel-console.log | |
| ${{ runner.temp }}/siyuan-e2e-*-workspace/temp/siyuan.log | |
| if-no-files-found: ignore | |
| retention-days: 14 | |
| - name: Install RPM build tools | |
| if: matrix.config.goos == 'linux' | |
| run: sudo apt-get install -y rpm | |
| - name: Building Electron App | |
| run: pnpm run ${{ matrix.config.electron_args }} | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Verify RPM Package Contents | |
| if: matrix.config.goos == 'linux' | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| run: | | |
| for package in build/*.rpm; do | |
| test -f "$package" | |
| build_id_entries="$(rpm -qpl "$package" | awk '/^\/usr\/lib\/\.build-id(\/|$)/')" | |
| if [ -n "$build_id_entries" ]; then | |
| echo "Unexpected build-id entries in $package:" | |
| echo "$build_id_entries" | |
| exit 1 | |
| fi | |
| done | |
| - name: Upload Build Artifacts (Non-Linux) | |
| if: matrix.config.goos != 'linux' | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: siyuan-${{ matrix.config.suffix }} | |
| path: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build/siyuan-*-${{ matrix.config.suffix }} | |
| - name: Upload Build Artifacts (Linux) | |
| if: matrix.config.goos == 'linux' | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: siyuan-linux | |
| path: | | |
| ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build/siyuan-*-linux.AppImage | |
| ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build/siyuan-*-linux.tar.gz | |
| ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build/siyuan-*-linux.deb | |
| ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app/build/siyuan-*-linux.rpm | |
| build_android: | |
| runs-on: ubuntu-latest | |
| name: ubuntu build android.apk | |
| # Android and desktop builds run in parallel, both depend on prepare. | |
| # create_release aggregates all artifacts once both jobs succeed. | |
| needs: prepare | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v6 | |
| with: | |
| path: ${{ github.workspace }}/go/src/github.com/${{ github.repository }} | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel/go.mod | |
| cache-dependency-path: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel/go.sum | |
| cache: true | |
| - run: go version | |
| - name: Set up Node | |
| uses: actions/setup-node@v6 | |
| with: | |
| node-version: 24 | |
| - name: Install Node pnpm | |
| run: npm install -g ${{ needs.prepare.outputs.packageManager }} | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Cache pnpm store | |
| uses: actions/cache@v5 | |
| with: | |
| path: ~/.pnpm-store | |
| key: pnpm-${{ runner.os }}-${{ hashFiles('app/pnpm-lock.yaml') }} | |
| restore-keys: pnpm-${{ runner.os }}- | |
| - name: Install Node Dependencies | |
| run: pnpm install --no-frozen-lockfile | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Building UI | |
| run: pnpm run build | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| - name: Set up JDK | |
| uses: actions/setup-java@v5 | |
| with: | |
| distribution: temurin | |
| java-version: "21" | |
| - name: Set up Android NDK | |
| # 锁定 NDK r28b(与本地开发环境同版本)。sdkmanager 不在 PATH 上 | |
| # (actions/runner-images#13674),用全路径调用;同时预接受 SDK 许可, | |
| # 避免 NDK 安装卡在交互式许可确认。 | |
| run: | | |
| SDKMANAGER="$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" | |
| if [ ! -x "$SDKMANAGER" ]; then | |
| SDKMANAGER=$(ls "$ANDROID_HOME"/cmdline-tools/*/bin/sdkmanager 2>/dev/null | head -1) | |
| fi | |
| if [ -z "$SDKMANAGER" ]; then | |
| echo "ERROR: sdkmanager not found under $ANDROID_HOME/cmdline-tools/" | |
| exit 1 | |
| fi | |
| echo "Using sdkmanager: $SDKMANAGER" | |
| yes | "$SDKMANAGER" --licenses > /dev/null 2>&1 || true | |
| "$SDKMANAGER" "ndk;28.2.13676358" > /dev/null | |
| NDK_DIR="$ANDROID_HOME/ndk/28.2.13676358" | |
| echo "ANDROID_NDK_HOME=$NDK_DIR" >> $GITHUB_ENV | |
| echo "ANDROID_NDK_ROOT=$NDK_DIR" >> $GITHUB_ENV | |
| echo "Installed NDK r28b at $NDK_DIR" | |
| - name: Set up gomobile | |
| # 锁定到 kernel/go.mod 中 x/mobile 模块的同一版本,避免工具与库版本漂移。 | |
| # GOPATH 被显式指向 workspace 下,go install 的产物在 $GOPATH/bin, | |
| # 该目录不在默认 PATH 上,需用全路径调用并写入 $GITHUB_PATH 供后续步骤使用。 | |
| run: | | |
| go install golang.org/x/mobile/cmd/gomobile@2553ed8ce294 | |
| echo "$GOPATH/bin" >> $GITHUB_PATH | |
| "$GOPATH/bin/gomobile" init | |
| env: | |
| GOPATH: ${{ github.workspace }}/go | |
| - name: Building Android Kernel | |
| run: gomobile bind -tags "fts5 sqlcipher" -ldflags "-s -w" -v -o kernel.aar -target android/arm64 -androidapi 26 ./mobile/ | |
| working-directory: ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel | |
| env: | |
| GOPATH: ${{ github.workspace }}/go | |
| CGO_ENABLED: 1 | |
| JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF-8 | |
| - name: Checkout siyuan-android | |
| uses: actions/checkout@v6 | |
| with: | |
| repository: siyuan-note/siyuan-android | |
| ref: main | |
| path: ${{ github.workspace }}/siyuan-android | |
| - name: Patch siyuan-android Repositories | |
| # siyuan-android 默认把阿里云镜像排在最前,某些依赖(如 org.apache:apache:31) | |
| # 在阿里云镜像缺失会导致解析失败。CI 在海外,直接走 google()/mavenCentral() | |
| # 更稳;sed 删除所有 maven.aliyun.com 行,保留官方仓库。 | |
| run: | | |
| sed -i '/maven.aliyun.com/d' build.gradle | |
| echo "=== Patched build.gradle repositories ===" | |
| grep -A 6 "repositories" build.gradle | head -20 | |
| working-directory: ${{ github.workspace }}/siyuan-android | |
| - name: Prepare siyuan-android Build Inputs | |
| run: | | |
| mkdir -p ${{ github.workspace }}/siyuan-android/app/libs | |
| cp ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/kernel/kernel.aar \ | |
| ${{ github.workspace }}/siyuan-android/app/libs/kernel.aar | |
| cd ${{ github.workspace }}/go/src/github.com/${{ github.repository }}/app | |
| node scripts/trimChangelogs.js | |
| zip -r app.zip appearance guide stage $([ -d changelogs ] && echo changelogs) | |
| zip -j app.zip ../LICENSE ../THIRD_PARTY_NOTICES.md | |
| mkdir -p ${{ github.workspace }}/siyuan-android/app/src/main/assets | |
| cp app.zip ${{ github.workspace }}/siyuan-android/app/src/main/assets/app.zip | |
| - name: Inject Signing Config | |
| run: | | |
| echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > ${{ github.workspace }}/siyuan-android/app/siyuan-android.jks | |
| cat > ${{ github.workspace }}/siyuan-android/signings.gradle <<EOF | |
| android { | |
| signingConfigs { | |
| siyuanConfig { | |
| storeFile file("siyuan-android.jks") | |
| storePassword "$ANDROID_KEYSTORE_PASSWORD" | |
| keyAlias "$ANDROID_KEY_ALIAS" | |
| keyPassword "$ANDROID_KEY_PASSWORD" | |
| } | |
| } | |
| } | |
| EOF | |
| env: | |
| ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }} | |
| ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }} | |
| ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }} | |
| ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }} | |
| - name: Building Android App | |
| # local.properties 被 siyuan-android 的 .gitignore 忽略,CI 里需现场生成, | |
| # 否则 Gradle 报 "SDK location not found";gradlew 也需显式加可执行权限。 | |
| # 产物重命名为带版本号的固定名,确保下载文件名正确(GitHub Release 的下载名 | |
| # 取决于上传时的本地文件名,# 语法只改显示标签)。 | |
| run: | | |
| echo "sdk.dir=$ANDROID_HOME" > local.properties | |
| chmod +x ./gradlew | |
| ./gradlew assembleOfficialRelease | |
| cd app/build/outputs/apk/official/release | |
| mv siyuan-*-official-release.apk siyuan-${{ needs.prepare.outputs.version }}.apk | |
| working-directory: ${{ github.workspace }}/siyuan-android | |
| - name: Upload Build Artifacts | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: siyuan-android | |
| path: ${{ github.workspace }}/siyuan-android/app/build/outputs/apk/official/release/siyuan-${{ needs.prepare.outputs.version }}.apk | |
| create_release: | |
| name: Create Release | |
| runs-on: ubuntu-latest | |
| needs: [prepare, build, build_android] | |
| steps: | |
| - name: Download all artifacts | |
| uses: actions/download-artifact@v8 | |
| - name: Prepare Release Assets | |
| shell: bash | |
| run: | | |
| set -euo pipefail | |
| VERSION="${{ needs.prepare.outputs.version }}" | |
| mkdir -p release-assets | |
| cp "siyuan-linux/siyuan-${VERSION}-linux.AppImage" release-assets/ | |
| cp "siyuan-linux/siyuan-${VERSION}-linux.tar.gz" release-assets/ | |
| cp "siyuan-linux/siyuan-${VERSION}-linux.deb" release-assets/ | |
| cp "siyuan-linux/siyuan-${VERSION}-linux.rpm" release-assets/ | |
| cp "siyuan-mac.dmg/siyuan-${VERSION}-mac.dmg" release-assets/ | |
| cp "siyuan-mac-arm64.dmg/siyuan-${VERSION}-mac-arm64.dmg" release-assets/ | |
| cp "siyuan-win.exe/siyuan-${VERSION}-win.exe" release-assets/ | |
| cp "siyuan-android/siyuan-${VERSION}.apk" release-assets/ | |
| EXPECTED_ASSETS=( | |
| "siyuan-${VERSION}-linux.AppImage" | |
| "siyuan-${VERSION}-linux.tar.gz" | |
| "siyuan-${VERSION}-linux.deb" | |
| "siyuan-${VERSION}-linux.rpm" | |
| "siyuan-${VERSION}-mac.dmg" | |
| "siyuan-${VERSION}-mac-arm64.dmg" | |
| "siyuan-${VERSION}-win.exe" | |
| "siyuan-${VERSION}.apk" | |
| ) | |
| for asset in "${EXPECTED_ASSETS[@]}"; do | |
| test -s "release-assets/${asset}" | |
| done | |
| ( | |
| cd release-assets | |
| sha256sum "${EXPECTED_ASSETS[@]}" > SHA256SUMS.txt | |
| sha256sum --check SHA256SUMS.txt | |
| ) | |
| - name: Create Release | |
| uses: ncipollo/release-action@v1 | |
| with: | |
| name: ${{ needs.prepare.outputs.release_title }} | |
| tag: ${{ github.ref_name }} | |
| body: ${{ needs.prepare.outputs.release_body }} | |
| draft: true | |
| prerelease: true | |
| allowUpdates: true | |
| omitDraftDuringUpdate: true | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Verify Release Is Draft | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GH_REPO: ${{ github.repository }} | |
| run: | | |
| test "$(gh release view "${{ github.ref_name }}" --json isDraft --jq '.isDraft')" = "true" | |
| - name: Upload Release Assets | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GH_REPO: ${{ github.repository }} | |
| run: | | |
| gh release upload "${{ github.ref_name }}" release-assets/* --clobber | |
| - name: Validate and Publish Release | |
| shell: bash | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GH_REPO: ${{ github.repository }} | |
| run: | | |
| set -euo pipefail | |
| VERSION="${{ needs.prepare.outputs.version }}" | |
| TAG="${{ github.ref_name }}" | |
| RELEASE_ID="$(gh release view "${TAG}" --json databaseId --jq '.databaseId')" | |
| EXPECTED_ASSETS=( | |
| "siyuan-${VERSION}-linux.AppImage" | |
| "siyuan-${VERSION}-linux.tar.gz" | |
| "siyuan-${VERSION}-linux.deb" | |
| "siyuan-${VERSION}-linux.rpm" | |
| "siyuan-${VERSION}-mac.dmg" | |
| "siyuan-${VERSION}-mac-arm64.dmg" | |
| "siyuan-${VERSION}-win.exe" | |
| "siyuan-${VERSION}.apk" | |
| "SHA256SUMS.txt" | |
| ) | |
| declare -A EXPECTED_DIGESTS | |
| for asset in "${EXPECTED_ASSETS[@]}"; do | |
| EXPECTED_DIGESTS["${asset}"]="sha256:$(sha256sum "release-assets/${asset}" | awk '{print $1}')" | |
| done | |
| for attempt in {1..12}; do | |
| ASSETS="$(gh api -H "X-GitHub-Api-Version: 2022-11-28" \ | |
| "repos/${GH_REPO}/releases/${RELEASE_ID}/assets?per_page=100")" | |
| READY=true | |
| for asset in "${EXPECTED_ASSETS[@]}"; do | |
| REMOTE_DIGEST="$(jq -r --arg name "${asset}" \ | |
| '.[] | select(.name == $name and .state == "uploaded") | .digest // empty' <<< "${ASSETS}")" | |
| if [ "${REMOTE_DIGEST}" != "${EXPECTED_DIGESTS[$asset]}" ]; then | |
| READY=false | |
| break | |
| fi | |
| done | |
| if [ "${READY}" = true ]; then | |
| gh release edit "${TAG}" --draft=false --prerelease | |
| exit 0 | |
| fi | |
| sleep 5 | |
| done | |
| echo "Release assets or SHA-256 digests are incomplete" | |
| exit 1 |