feat: exclude src/Resources/config #237
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| tags: | |
| - '*' | |
| permissions: | |
| contents: write | |
| id-token: write | |
| packages: write | |
| env: | |
| GOTOOLCHAIN: local | |
| jobs: | |
| release: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # ratchet:step-security/harden-runner@v2.12.2 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # ratchet:actions/setup-go@v5 | |
| with: | |
| go-version: '1.24' | |
| cache: true | |
| check-latest: true | |
| - name: Setup Node | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| registry-url: "https://registry.npmjs.org" | |
| - name: Install Nix | |
| uses: DeterminateSystems/nix-installer-action@c723f3a885e3f1d866d91f4f0c33dd44b1fc7c60 # ratchet:DeterminateSystems/nix-installer-action@main | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # ratchet:docker/setup-buildx-action@v3 | |
| - name: Install Cosign | |
| uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # ratchet:sigstore/cosign-installer@v3 | |
| - name: Install Syft | |
| uses: anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # ratchet:anchore/sbom-action/download-syft@v0.20.2 | |
| - name: Gather Frosh Homebrew Token | |
| uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # ratchet:octo-sts/action@v1.0.0 | |
| id: sts-homebrew | |
| with: | |
| scope: FriendsOfShopware/homebrew-tap | |
| identity: release | |
| - name: Gather Homebrew Token | |
| uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # ratchet:octo-sts/action@v1.0.0 | |
| id: sts-shopware | |
| with: | |
| scope: shopware/homebrew-tap | |
| identity: swcli | |
| - name: Gather NUR Token | |
| uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # ratchet:octo-sts/action@v1.0.0 | |
| id: sts-nur | |
| with: | |
| scope: FriendsOfShopware/nur-packages | |
| identity: release | |
| - name: Login into Docker Hub | |
| run: echo "${{ secrets.DOCKER_HUB_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_HUB_USERNAME }} --password-stdin | |
| - name: Run GoReleaser | |
| uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # ratchet:goreleaser/goreleaser-action@v6 | |
| with: | |
| distribution: goreleaser-pro | |
| version: '~> v2' | |
| args: release --clean | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.sts-homebrew.outputs.token }} | |
| HOMEBREW_TAP_GITHUB_TOKEN_SHOPWARE: ${{ steps.sts-shopware.outputs.token }} | |
| NUR_GITHUB_TOKEN: ${{ steps.sts-nur.outputs.token }} | |
| AUR_KEY: ${{ secrets.AUR_KEY }} | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }} | |
| # Code Signing | |
| APPLE_CODE_SIGNING_KEY: ${{ secrets.APPLE_CODE_SIGNING_KEY }} | |
| APPLE_CODE_SIGNING_KEY_PASSWORD: ${{ secrets.APPLE_CODE_SIGNING_KEY_PASSWORD }} | |
| APPLE_APP_STORE_CONNECT_ISSUER: ${{ secrets.APPLE_APP_STORE_CONNECT_ISSUER }} | |
| APPLE_APP_STORE_CONNECT_KEY_ID: ${{ secrets.APPLE_APP_STORE_CONNECT_KEY_ID }} | |
| APPLE_APP_STORE_CONNECT_KEY: ${{ secrets.APPLE_APP_STORE_CONNECT_KEY }} | |
| - name: Install Cloudsmith CLI | |
| run: pip install --upgrade cloudsmith-cli | |
| - name: Cloudsmith Uploads | |
| env: | |
| CLOUDSMITH_API_KEY: ${{ secrets.CLOUDSMITH_API_KEY }} | |
| run: | | |
| for filename in dist/*.deb; do | |
| cloudsmith push deb friendsofshopware/stable/any-distro/any-version $filename | |
| done | |
| for filename in dist/*.rpm; do | |
| cloudsmith push rpm friendsofshopware/stable/any-distro/any-version $filename | |
| done | |
| for filename in dist/*.apk; do | |
| cloudsmith push alpine friendsofshopware/stable/alpine/any-version $filename | |
| done |