release.yml

name: Manual Cross Platform Release

on:
  workflow_dispatch:
    inputs:
      version_bump:
        description: 'Version bump type'
        required: true
        default: 'patch'
        type: choice
        options:
          - patch
          - minor
          - major
      publish:
        description: Publish artifacts to GitHub release
        required: true
        default: true
        type: boolean

jobs:
  prepare:
    name: Bump version
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      new_version: ${{ steps.bump.outputs.new_version }}
      sha: ${{ steps.commit.outputs.sha }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Bump version
        id: bump
        run: |
          NEW_VERSION=$(npm version ${{ github.event.inputs.version_bump }} --no-git-tag-version | sed 's/^v//')
          echo "new_version=${NEW_VERSION}" >> "$GITHUB_OUTPUT"

      - name: Commit version bump
        id: commit
        run: |
          git config --local user.email "action@github.com"
          git config --local user.name "GitHub Action"
          git add package.json
          git commit -m "Bump version to ${{ steps.bump.outputs.new_version }}"
          git push origin HEAD:${{ github.ref_name }}
          echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"

  build:
    name: Build ${{ matrix.platform }} on ${{ matrix.os }}
    needs: prepare
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: windows-latest
            platform: win
            build_command: pnpm exec electron-builder --win --x64 --publish never
          - os: macos-latest
            platform: mac
            build_command: pnpm exec electron-builder --mac --publish never
    runs-on: ${{ matrix.os }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ needs.prepare.outputs.sha }}

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build Electron main process
        run: pnpm run electron:build-main

      - name: Build renderer assets
        run: pnpm run build

      - name: Build release packages
        # No signing certificate yet: mac.identity "-" in package.json forces ad-hoc signing so
        # Apple Silicon builds launch. electron-builder only consults CSC_IDENTITY_AUTO_DISCOVERY
        # when identity is unset, so it has no effect here - left unset for clarity, not because
        # it changes this build.
        run: ${{ matrix.build_command }}
        shell: bash

      # The mac job packages x64 and arm64 from one node_modules, and pnpm only materialises
      # the runner's own architecture, so a missing native binary is invisible until a user
      # launches the artifact. Fail the release here instead.
      - name: Verify packaged native dependencies
        run: node test/verify-packaged-sharp.mjs release
        shell: bash

      - name: Upload build artifacts
        uses: actions/upload-artifact@v4
        with:
          name: release-${{ matrix.platform }}
          path: |
            release/*.exe
            release/*.dmg
            release/*.zip
            release/*.yml
            release/*.yaml
            release/*.blockmap
          if-no-files-found: error

  publish:
    if: ${{ inputs.publish }}
    name: Publish GitHub Release
    needs: [prepare, build]
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ needs.prepare.outputs.sha }}

      - name: Download artifacts
        uses: actions/download-artifact@v4
        with:
          path: release-artifacts

      - name: Tag and publish release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          VERSION="${{ needs.prepare.outputs.new_version }}"
          TAG="v${VERSION}"
          git config --local user.email "action@github.com"
          git config --local user.name "GitHub Action"
          git tag "$TAG"
          git push origin "$TAG"

          sed "s/VERSION_PLACEHOLDER/${VERSION}/g" .github/release_notes_template.md > release_notes.md

          gh release create "$TAG" \
            --title "Release ${TAG}" \
            --notes-file release_notes.md
          while IFS= read -r -d '' file; do
            echo "Uploading $(basename "$file")"
            gh release upload "$TAG" "$file" --clobber
          done < <(
            find release-artifacts -type f \
              \( -name '*.exe' -o -name '*.dmg' -o -name '*.zip' \
                 -o -name '*.yml' -o -name '*.yaml' -o -name '*.blockmap' \) \
              -print0
          )