flow/.github/workflows/release.yml at e1d0e0256edca66b5819f0adaa797d59a47d7747 · flow-php/flow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
on:
  release:
    types:
      - published

jobs:
  build-archives:
    name: "Release"
    runs-on: ${{ matrix.operating-system }}
    strategy:
      matrix:
        php-version:
          - "8.3"
        operating-system:
          - "ubuntu-latest"

    steps:
      - name: "Checkout"
        uses: "actions/checkout@v5"
        with:
          fetch-depth: 0

      - name: "Setup PHP Environment"
        uses: "./.github/actions/setup-php-env"
        with:
          php-version: "${{ matrix.php-version }}"
          dependencies: "locked"
          coverage: "none"
          extensions: ':psr, bcmath, dom, hash, json, mbstring, xml, xmlwriter, xmlreader, zlib'
          cache-key-suffix: "-locked-phar"
          apt-packages: "build-essential autoconf automake libtool protobuf-compiler libprotobuf-c-dev"
          pie-extensions: "flow-php/pg-query-ext:1.x-dev"

      - name: "Build PHAR file"
        run: "composer build:phar"

      - name: "Validate Flow PHAR"
        run: |
          ./build/flow.phar --version

      - name: "Import GPG Key"
        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}

      - name: "Sign PHAR"
        run: >
          gpg
          --batch
          --yes
          --local-user="${{ secrets.GPG_USER_EMAIL }}"
          --passphrase="${{ secrets.GPG_PASSPHRASE }}"
          --pinentry-mode="loopback"
          --detach-sign
          --output="./build/flow.phar.asc"
          ./build/flow.phar

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build Docker Image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile
          push: true
          platforms: linux/amd64,linux/arm64
          tags: |
            ghcr.io/flow-php/flow:${{ github.ref_name }}
          target: flow
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: "Upload binaries to release"
        uses: softprops/action-gh-release@v2
        if: ${{startsWith(github.ref, 'refs/tags/') }}
        with:
          files: |
            build/flow.phar
            build/flow.phar.asc

      - name: "Get release tag"
        run: |
          RELEASE_TAG=${GITHUB_REF/refs\/tags\//}
          echo "RELEASE_TAG=$RELEASE_TAG" >> $GITHUB_ENV

      - name: "Update Homebrew formula"
        uses: mislav/bump-homebrew-formula-action@v3
        with:
          formula-name: flow-php
          formula-path: src/tools/homebrew/Formula/flow-php.rb
          homebrew-tap: flow-php/flow
          download-url: https://github.com/flow-php/flow/releases/download/${{ env.RELEASE_TAG }}/flow.phar
          commit-message: |
            Update Homebrew TAP formula: {{formulaName}} to version: {{version}}

            <h2>Change Log</h2>
            <div id="change-log">
              <h4>Changed</h4>
              <ul id="changed">
                <li>Update Homebrew TAP formula: {{formulaName}} to version: {{version}}</li>
              </ul>
            </div>
            <hr/>

            <h2>Description</h2>

            Created by https://github.com/mislav/bump-homebrew-formula-action
        env:
          COMMITTER_TOKEN: ${{ secrets.ACCESS_TOKEN }}