feat: refactor release workflow and add special update handling for electron app (#4969)

Author: Soulter

.github/workflows/auto_release.yml

@@ -1,4 +1,4 @@
-name: Desktop Release
+name: Release
 
 on:
   push:
@@ -11,13 +11,96 @@ on:
         required: false
         default: "master"
       tag:
-        description: "Release tag to upload assets to (for example: v4.14.6)"
+        description: "Release tag to publish assets to (for example: v4.14.6)"
         required: false
 
 permissions:
   contents: write
 
 jobs:
+  build-dashboard:
+    name: Build Dashboard
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          ref: ${{ inputs.ref || github.ref }}
+
+      - name: Resolve tag
+        id: tag
+        shell: bash
+        run: |
+          if [ "${{ github.event_name }}" = "push" ]; then
+            tag="${GITHUB_REF_NAME}"
+          elif [ -n "${{ inputs.tag }}" ]; then
+            tag="${{ inputs.tag }}"
+          else
+            tag="$(git describe --tags --abbrev=0)"
+          fi
+          if [ -z "$tag" ]; then
+            echo "Failed to resolve tag." >&2
+            exit 1
+          fi
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.28.2
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 20
+          cache: "pnpm"
+          cache-dependency-path: dashboard/pnpm-lock.yaml
+
+      - name: Build dashboard dist
+        shell: bash
+        run: |
+          pnpm --dir dashboard install --frozen-lockfile
+          pnpm --dir dashboard run build
+          echo "${{ steps.tag.outputs.tag }}" > dashboard/dist/assets/version
+          cd dashboard
+          zip -r "AstrBot-${{ steps.tag.outputs.tag }}-dashboard.zip" dist
+
+      - name: Upload dashboard artifact
+        uses: actions/upload-artifact@v6
+        with:
+          name: Dashboard-${{ steps.tag.outputs.tag }}
+          if-no-files-found: error
+          path: dashboard/AstrBot-${{ steps.tag.outputs.tag }}-dashboard.zip
+
+      - name: Upload dashboard package to Cloudflare R2
+        if: ${{ secrets.R2_ACCOUNT_ID != '' && secrets.R2_ACCESS_KEY_ID != '' && secrets.R2_SECRET_ACCESS_KEY != '' }}
+        env:
+          R2_ACCOUNT_ID: ${{ secrets.R2_ACCOUNT_ID }}
+          R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
+          R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
+          R2_BUCKET_NAME: "astrbot"
+          R2_OBJECT_NAME: "astrbot-webui-latest.zip"
+          VERSION_TAG: ${{ steps.tag.outputs.tag }}
+        shell: bash
+        run: |
+          curl https://rclone.org/install.sh | sudo bash
+
+          mkdir -p ~/.config/rclone
+          cat <<EOF > ~/.config/rclone/rclone.conf
+          [r2]
+          type = s3
+          provider = Cloudflare
+          access_key_id = $R2_ACCESS_KEY_ID
+          secret_access_key = $R2_SECRET_ACCESS_KEY
+          endpoint = https://${R2_ACCOUNT_ID}.r2.cloudflarestorage.com
+          EOF
+
+          cp "dashboard/AstrBot-${VERSION_TAG}-dashboard.zip" "dashboard/${R2_OBJECT_NAME}"
+          rclone copy "dashboard/${R2_OBJECT_NAME}" "r2:${R2_BUCKET_NAME}" --progress
+          cp "dashboard/AstrBot-${VERSION_TAG}-dashboard.zip" "dashboard/astrbot-webui-${VERSION_TAG}.zip"
+          rclone copy "dashboard/astrbot-webui-${VERSION_TAG}.zip" "r2:${R2_BUCKET_NAME}" --progress
+
   build-desktop:
     name: Build ${{ matrix.name }}
     runs-on: ${{ matrix.runner }}
@@ -58,6 +141,23 @@ jobs:
           fetch-depth: 0
           ref: ${{ inputs.ref || github.ref }}
 
+      - name: Resolve tag
+        id: tag
+        shell: bash
+        run: |
+          if [ "${{ github.event_name }}" = "push" ]; then
+            tag="${GITHUB_REF_NAME}"
+          elif [ -n "${{ inputs.tag }}" ]; then
+            tag="${{ inputs.tag }}"
+          else
+            tag="$(git describe --tags --abbrev=0)"
+          fi
+          if [ -z "$tag" ]; then
+            echo "Failed to resolve tag." >&2
+            exit 1
+          fi
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+
       - name: Setup uv
         uses: astral-sh/setup-uv@v6
 
@@ -81,36 +181,21 @@ jobs:
             desktop/pnpm-lock.yaml
 
       - name: Install dependencies
+        shell: bash
         run: |
           uv sync
           pnpm --dir dashboard install --frozen-lockfile
           pnpm --dir desktop install --frozen-lockfile
 
       - name: Build desktop package
+        shell: bash
         run: |
           pnpm --dir dashboard run build
           pnpm --dir desktop run build:webui
           pnpm --dir desktop run build:backend
           pnpm --dir desktop run sync:version
           pnpm --dir desktop exec electron-builder --publish never
 
-      - name: Resolve artifact tag
-        id: tag
-        shell: bash
-        run: |
-          if [ "${{ github.event_name }}" = "push" ]; then
-            tag="${GITHUB_REF_NAME}"
-          elif [ -n "${{ inputs.tag }}" ]; then
-            tag="${{ inputs.tag }}"
-          else
-            tag="$(git describe --tags --abbrev=0)"
-          fi
-          if [ -z "$tag" ]; then
-            echo "Failed to resolve artifact tag." >&2
-            exit 1
-          fi
-          echo "tag=$tag" >> "$GITHUB_OUTPUT"
-
       - name: Normalize artifact names
         shell: bash
         env:
@@ -160,17 +245,19 @@ jobs:
           path: desktop/dist/release/*
 
   publish-release:
-    name: Publish Release Assets
+    name: Publish GitHub Release
     runs-on: ubuntu-24.04
-    needs: build-desktop
+    needs:
+      - build-dashboard
+      - build-desktop
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
           ref: ${{ inputs.ref || github.ref }}
 
-      - name: Resolve release tag
+      - name: Resolve tag
         id: tag
         shell: bash
         run: |
@@ -182,29 +269,46 @@ jobs:
             tag="$(git describe --tags --abbrev=0)"
           fi
           if [ -z "$tag" ]; then
-            echo "Failed to resolve release tag." >&2
+            echo "Failed to resolve tag." >&2
             exit 1
           fi
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
 
-      - name: Download built artifacts
+      - name: Download dashboard artifact
+        uses: actions/download-artifact@v6
+        with:
+          name: Dashboard-${{ steps.tag.outputs.tag }}
+          path: release-assets
+
+      - name: Download desktop artifacts
         uses: actions/download-artifact@v6
         with:
           pattern: AstrBot-${{ steps.tag.outputs.tag }}-*
           path: release-assets
           merge-multiple: true
 
+      - name: Resolve release notes
+        id: notes
+        shell: bash
+        run: |
+          note_file="changelogs/${{ steps.tag.outputs.tag }}.md"
+          if [ ! -f "$note_file" ]; then
+            note_file="$(mktemp)"
+            echo "Release ${{ steps.tag.outputs.tag }}" > "$note_file"
+          fi
+          echo "file=$note_file" >> "$GITHUB_OUTPUT"
+
       - name: Ensure release exists
         env:
           GH_TOKEN: ${{ github.token }}
         shell: bash
         run: |
           tag="${{ steps.tag.outputs.tag }}"
           if ! gh release view "$tag" >/dev/null 2>&1; then
-            gh release create "$tag" --title "$tag" --notes ""
+            gh release create "$tag" --title "$tag" --notes-file "${{ steps.notes.outputs.file }}"
           fi
 
-      - name: Remove stale desktop assets from release
+      - name: Remove stale assets from release
         env:
           GH_TOKEN: ${{ github.token }}
         shell: bash
@@ -225,3 +329,33 @@ jobs:
         run: |
           tag="${{ steps.tag.outputs.tag }}"
           gh release upload "$tag" release-assets/* --clobber
+
+  publish-pypi:
+    name: Publish PyPI
+    runs-on: ubuntu-24.04
+    needs: publish-release
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          ref: ${{ inputs.ref || github.ref }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+
+      - name: Install uv
+        shell: bash
+        run: python -m pip install uv
+
+      - name: Build package
+        shell: bash
+        run: uv build
+
+      - name: Publish to PyPI
+        env:
+          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_TOKEN }}
+        shell: bash
+        run: uv publish

.github/workflows/desktop_release.yml .github/workflows/release.yml.github/workflows/desktop_release.yml renamed to .github/workflows/release.yml

@@ -47,6 +47,17 @@
     "releaseNotes": {
       "title": "Release Notes"
     },
+    "redirectConfirm": {
+      "title": "Leaving AstrBot",
+      "message": "You are about to open the GitHub Releases page. Continue?",
+      "latestLabel": "Latest",
+      "targetVersion": "Target version: ",
+      "currentVersion": "Current version: ",
+      "guideTitle": "Recommended after opening:",
+      "guideStep1": "Download the installer that matches your OS and architecture.",
+      "guideStep2": "Install it and restart AstrBot.",
+      "guideStep3": "If you use Docker, prefer the image update path."
+    },
     "dashboardUpdate": {
       "title": "Update Dashboard to Latest Version Only",
       "currentVersion": "Current Version",