Release App #54
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release App | |
| on: | |
| release: | |
| types: [published] | |
| jobs: | |
| release: | |
| name: 'Release MockingStar App' | |
| runs-on: macOS | |
| permissions: | |
| contents: write | |
| steps: | |
| - name: Check out Repository | |
| uses: actions/checkout@v3 | |
| - name: Set env | |
| run: | | |
| version_and_build=$(echo "${GITHUB_REF#refs/*/}" | awk -F '[-]' '{print $1 " " $2}') | |
| version=$(echo $version_and_build | awk '{print $1}') | |
| build=$(echo $version_and_build | awk '{print $2}') | |
| echo "RELEASE_VERSION=$version" >> $GITHUB_ENV | |
| echo "BUILD_NUMBER=$build" >> $GITHUB_ENV | |
| - name: Configure git credentials | |
| uses: fregante/setup-git-user@v2 | |
| - name: Install Certs and Profiles | |
| run: | | |
| mkdir ./certs | |
| echo ${{ secrets.CERT }} | base64 -D > ./certs/MockingStarCert.p12 | |
| echo ${{ secrets.PROFILE }} | base64 -D > ./certs/Direct_com.trendyol.MockingStar.provisionprofile | |
| echo ${{ secrets.ASC_KEY }} | base64 -D > ./certs/ASCKEY.p8 | |
| echo ${{ secrets.SPARKLE_PRIVATE_KEY }} | base64 -D > ./certs/Sparkle.key | |
| export KEYCHAIN_PATH=$(security default-keychain | tr -d ' "' ) | |
| security unlock-keychain -p ${{ secrets.PASS }} $KEYCHAIN_PATH | |
| security set-keychain-settings -u -t 3600 $KEYCHAIN_PATH | |
| security import ./certs/MockingStarCert.p12 -k $KEYCHAIN_PATH -P ${{ secrets.CERT_PASS }} -A | |
| security set-key-partition-list -S apple-tool:,apple: -k ${{ secrets.PASS }} $KEYCHAIN_PATH >/dev/null || true | |
| cp ./certs/Direct_com.trendyol.MockingStar.provisionprofile ~/Library/MobileDevice/Provisioning\ Profiles/7a785103-ddb5-42f4-99b5-d7cdb5b6cae9.provisionprofile | |
| - name: Update App Version | |
| run: | | |
| sed -i "" "s/MARKETING_VERSION = .*/MARKETING_VERSION = ${{ env.RELEASE_VERSION }};/g" "./MockingStar/MockingStar.xcodeproj/project.pbxproj" | |
| sed -i "" "s/CURRENT_PROJECT_VERSION = .*/CURRENT_PROJECT_VERSION = ${{ env.BUILD_NUMBER }};/g" "./MockingStar/MockingStar.xcodeproj/project.pbxproj" | |
| - name: Build Mocking Star | |
| run: | | |
| set -o pipefail && xcodebuild archive \ | |
| -workspace MockingStar.xcworkspace \ | |
| -scheme MockingStar \ | |
| -archivePath ./.build/archive \ | |
| -derivedDataPath ./.build/derivedData \ | |
| -skipMacroValidation \ | |
| DEVELOPMENT_TEAM=${{ secrets.TEAM_ID }} \ | |
| CODE_SIGN_STYLE=Manual \ | |
| CODE_SIGN_IDENTITY="${{ secrets.CODESIGNING_IDENTITY }}" \ | |
| PROVISIONING_PROFILE="com.trendyol.mocking-star Direct" \ | |
| OTHER_CODE_SIGN_FLAGS="--keychain '~/Library/Keychains/MockingStarKeychain.keychain-db'" | xcbeautify --renderer github-actions | |
| - name: Export Archive | |
| run: | | |
| sed -i '' 's/TEAMID/${{ secrets.TEAM_ID }}/g' ExportOptions.plist | |
| sed -i '' 's/DEVID_CERT/${{ secrets.CODESIGNING_IDENTITY }}/g' ExportOptions.plist | |
| set -o pipefail && xcodebuild -exportArchive \ | |
| -archivePath ./.build/archive.xcarchive \ | |
| -exportPath ./.build/appBuildOutput \ | |
| -exportOptionsPlist ExportOptions.plist | xcbeautify --renderer github-actions | |
| - name: Package App | |
| run: ditto -c -k --sequesterRsrc --keepParent ./.build/appBuildOutput/MockingStar.app ./.build/appBuildOutput/MockingStar-App.zip | |
| - name: Notarytool | |
| run: xcrun notarytool submit ./.build/appBuildOutput/MockingStar-App.zip --issuer ${{ secrets.ASC_ISSUER_ID }} --key-id ${{ secrets.ASC_KEY_ID }} --key ./certs/ASCKEY.p8 --wait | |
| - name: Create Sparkle Update | |
| run: | | |
| MinimumVersion=$(plutil -extract LSMinimumSystemVersion raw -o - .build/appBuildOutput/MockingStar.app/Contents/Info.plist) | |
| Signature=$(./.build/derivedData/SourcePackages/artifacts/sparkle/Sparkle/bin/sign_update -f certs/Sparkle.key .build/appBuildOutput/MockingStar-App.zip) | |
| Signature=$(echo "$Signature" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//') | |
| export RELEASE_VERSION="${{ env.RELEASE_VERSION }}" | |
| export BUILD_NUMBER="${{ env.BUILD_NUMBER }}" | |
| export RELEASE_VERSION_TAG="${{ github.event.release.tag_name }}" | |
| export RELEASE_NOTES="${{ github.event.release.body }}" | |
| export MinimumVersion="$MinimumVersion" | |
| export Signature="$Signature" | |
| swift run --package-path ./SparkleActions | |
| git commit -m 'Release version ${{ github.event.release.tag_name }}! 🎉' Appcast.xml | |
| git branch Release/${{ github.event.release.tag_name }} | |
| git push -u origin Release/${{ github.event.release.tag_name }} | |
| - name: Create a Release | |
| uses: ncipollo/release-action@v1 | |
| with: | |
| tag: ${{ github.event.release.tag_name }} | |
| name: MockingStar - Release ${{ github.event.release.tag_name }} | |
| artifacts: '.build/appBuildOutput/MockingStar-App.zip' | |
| allowUpdates: true | |
| omitBodyDuringUpdate: true | |
| makeLatest: false | |
| - name: Clean Keychain And Files | |
| if: always() | |
| run: | | |
| security delete-certificate -c "${{ secrets.CODESIGNING_IDENTITY }}" | |
| rm -rf ./certs | |
| rm ~/Library/MobileDevice/Provisioning\ Profiles/7a785103-ddb5-42f4-99b5-d7cdb5b6cae9.provisionprofile | |