Update GitHub Actions release automation (#550)

- Replace custom winget action with vedantmgoyal9/winget-releaser
- Bump softprops/action-gh-release from v1 to v2
- Add update-binaries job to auto-generate hash configs and open PRs
  against ungoogled-software/ungoogled-chromium-binaries

Author: Nifury

.github/actions/winget/action.yml

@@ -0,0 +1,42 @@
+import datetime
+import hashlib
+import os
+
+import requests
+
+tag = os.environ['GITHUB_REF_NAME']
+config = [
+    ('32bit', 'x86'),
+    ('64bit', 'x64'),
+    ('arm64', 'arm64'),
+]
+endings = [
+    ('installer', 'exe'),
+    ('windows', 'zip'),
+]
+hashes = (('md5', hashlib.md5), ('sha1', hashlib.sha1), ('sha256', hashlib.sha256))
+for c_path, c_name in config:
+    lines = []
+    lines.append('[_metadata]')
+    lines.append(f'publication_time = {datetime.datetime.now().isoformat()}')
+    lines.append('github_author = github-actions')
+    lines.append('# Add a `note` field here for additional information. Markdown is supported')
+
+    for ending in endings:
+        lines.append('')
+        filename_tag = tag[:-1] + '1'
+        name = f'ungoogled-chromium_{filename_tag}_{ending[0]}_{c_name}.{ending[1]}'
+        lines.append(f'[{name}]')
+        lines.append(f'url = https://github.com/ungoogled-software/ungoogled-chromium-windows/releases/download/{tag}/{name}')
+
+        with requests.get(f'https://github.com/ungoogled-software/ungoogled-chromium-windows/releases/download/{tag}/{name}', stream=True) as r:
+            r.raise_for_status()
+            hash_instances = [(h_name, h()) for h_name, h in hashes]
+            for chunk in r.iter_content(65536):
+                for _, h in hash_instances:
+                    h.update(chunk)
+        for h_name, h in hash_instances:
+            h = h.hexdigest()
+            lines.append(f'{h_name} = {h}')
+    with open(f'config/platforms/windows/{c_path}/{tag[:-2]}.ini', 'w') as f:
+        f.write('\n'.join(lines))

.github/actions/winget/index.js

@@ -1254,7 +1254,7 @@ jobs:
           name: chromium-arm
       - name: Publish release
         id: publish
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           fail_on_unmatched_files: true
           files: |
@@ -1263,17 +1263,63 @@ jobs:
       assets: ${{ steps.publish.outputs.assets }}
   publish-winget:
     needs: publish-release
-    runs-on: windows-2022
+    runs-on: ubuntu-slim
     steps:
-      - name: Checkout
+      - name: Get version
+        id: version
+        run: echo "version=$(echo '${{ github.ref_name }}' | cut -d'-' -f1)" >> $GITHUB_OUTPUT
+      - uses: vedantmgoyal9/winget-releaser@main
+        with:
+          identifier: eloston.ungoogled-chromium
+          token: ${{ secrets.PAT }}
+          installers-regex: .(exe|zip)$
+          version: ${{ steps.version.outputs.version }}
+          fork-user: Nifury
+  update-binaries:
+    needs: publish-release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout ungoogled-chromium-windows
+        uses: actions/checkout@v3
+        with:
+          path: ungoogled-chromium-windows
+      - name: Checkout ungoogled-chromium-binaries
         uses: actions/checkout@v3
-      - name: Setup Stage
-        run: npm install
-        working-directory: ./.github/actions/winget
-      - name: Run Stage
-        id: stage
-        uses: ./.github/actions/winget
         with:
+          repository: Nifury/ungoogled-chromium-binaries
           token: ${{ secrets.PAT }}
-          version: ${{ github.ref_name }}
-          assets: ${{ needs.publish-release.outputs.assets }}
+          path: ungoogled-chromium-binaries
+      - name: Rebase onto upstream master
+        working-directory: ungoogled-chromium-binaries
+        run: |
+          git remote add upstream https://github.com/ungoogled-software/ungoogled-chromium-binaries.git
+          git fetch upstream
+          git rebase upstream/master
+      - name: Set up Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install dependencies
+        run: pip install requests
+      - name: Run gen.py
+        working-directory: ungoogled-chromium-binaries
+        run: python ../ungoogled-chromium-windows/.github/scripts/gen.py
+      - name: Commit and push
+        working-directory: ungoogled-chromium-binaries
+        run: |
+          git config user.name "github-actions"
+          git config user.email "github-actions@github.com"
+          git add config/platforms/windows/
+          git commit -m "Update Windows binaries for ${{ github.ref_name }}"
+          git push --force-with-lease
+      - name: Create pull request
+        working-directory: ungoogled-chromium-binaries
+        run: |
+          gh pr create \
+            --repo ungoogled-software/ungoogled-chromium-binaries \
+            --head Nifury:master \
+            --base master \
+            --title "Update Windows binaries for ${{ github.ref_name }}" \
+            --body "Automated update of Windows binary hashes for release ${{ github.ref_name }}."
+        env:
+          GH_TOKEN: ${{ secrets.PAT }}