release.yml

name: Release StackHub

on:
  push:
    tags:
      - "v*"

permissions:
  contents: write

jobs:
  release:
    name: Build macOS release
    runs-on: macos-14

    steps:
      - name: Check out source
        uses: actions/checkout@v4

      - name: Validate version tag
        shell: bash
        run: |
          if [[ ! "$GITHUB_REF_NAME" =~ ^v[0-9]+\.[0-9]+\.[0-9]+([-.][0-9A-Za-z.-]+)?$ ]]; then
            echo "Version tags must use vMAJOR.MINOR.PATCH, for example v0.1.0." >&2
            exit 1
          fi

          echo "VERSION=${GITHUB_REF_NAME#v}" >> "$GITHUB_ENV"

      - name: Run tests
        working-directory: swift-prototype
        run: swift test --disable-sandbox

      - name: Assemble and verify app bundle
        shell: bash
        run: |
          app_path="release/StackHub.app"
          archive_path="release/StackHub-${VERSION}-macos-arm64.zip"

          bash scripts/package-app.sh "$VERSION" release
          ditto -c -k --sequesterRsrc --keepParent "$app_path" "$archive_path"
          shasum -a 256 "$archive_path"

      - name: Generate signed Sparkle feed
        env:
          SPARKLE_PRIVATE_KEY: ${{ secrets.SPARKLE_PRIVATE_KEY }}
        run: |
          if [[ -z "$SPARKLE_PRIVATE_KEY" ]]; then
            echo "Missing SPARKLE_PRIVATE_KEY repository secret." >&2
            exit 1
          fi
          bash scripts/generate-update-feed.sh "$VERSION" release

      - name: Publish GitHub Release
        env:
          GH_TOKEN: ${{ github.token }}
        shell: bash
        run: |
          archive_path="release/StackHub-${VERSION}-macos-arm64.zip"
          asset_label="StackHub-${VERSION}-macos-arm64.zip"

          if gh release view "$GITHUB_REF_NAME" >/dev/null 2>&1; then
            gh release upload "$GITHUB_REF_NAME" "$archive_path#$asset_label" release/appcast.xml --clobber
          else
            release_flags=()
            if [[ "$VERSION" == *-* ]]; then
              release_flags+=(--prerelease)
            fi
            if [[ -f "docs/releases/${GITHUB_REF_NAME}.md" ]]; then
              release_flags+=(--notes-file "docs/releases/${GITHUB_REF_NAME}.md")
            else
              release_flags+=(--generate-notes)
            fi
            gh release create "$GITHUB_REF_NAME" "$archive_path#$asset_label" release/appcast.xml \
              --title "StackHub $VERSION" \
              --verify-tag "${release_flags[@]}"
          fi