fix: hide Windows console and improve release workflow

b45632 · b45632 · commit d035ba17b4ad · 2026-07-13T13:54:16.000+02:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -9,6 +9,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   check:
     name: check (${{ matrix.platform }})
@@ -22,32 +26,39 @@ jobs:
 
     runs-on: ${{ matrix.platform }}
 
+
     steps:
-      - name: Checkout repository
+      - name: Repository auschecken
         uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
-      - name: Set up pnpm
+      - name: pnpm einrichten
         uses: pnpm/action-setup@v6
         with:
           version: 10.33.0
+          run_install: false
 
-      - name: Set up Node.js
+      - name: Node.js 24 mit pnpm-Cache einrichten
         uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
+          package-manager-cache: false
 
-      - name: Set up Rust
+      - name: Rust stable einrichten
         uses: dtolnay/rust-toolchain@stable
 
-      - name: Cache Rust build artifacts
+      - name: Rust-Buildcache einrichten
         uses: swatinem/rust-cache@v2
         with:
           workspaces: src-tauri -> target
+          shared-key: ci-${{ matrix.platform }}
 
-      - name: Install Linux system dependencies
+      - name: Linux-Systempakete installieren
         if: matrix.platform == 'ubuntu-22.04'
+        shell: bash
         run: |
           sudo apt-get update
           sudo apt-get install -y \
@@ -57,11 +68,11 @@ jobs:
             patchelf \
             xdg-utils
 
-      - name: Install frontend dependencies
+      - name: Frontend-Abhängigkeiten reproduzierbar installieren
         run: pnpm install --frozen-lockfile
 
-      - name: Build frontend
+      - name: TypeScript und Frontend bauen
         run: pnpm build
 
-      - name: Check Rust core
-        run: cargo check --locked --manifest-path src-tauri/Cargo.toml
+      - name: Tauri/Rust prüfen
+        run: cargo check --manifest-path src-tauri/Cargo.toml
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,55 +3,204 @@ name: Release
 on:
   push:
     tags:
-      - "v*"
+      - "v*.*.*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Vorhandenen Tag bauen, z. B. v0.2.1"
+        required: true
+        type: string
+
+concurrency:
+  group: release-${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+  cancel-in-progress: false
 
 permissions:
   contents: write
 
+env:
+  NODE_VERSION: "24"
+  PNPM_VERSION: "10.33.0"
+  RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+
 jobs:
-  publish-tauri:
-    name: release (${{ matrix.platform }})
+  validate:
+    name: Release prüfen
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: Repository und Release-Tag auschecken
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: Node.js 24 einrichten
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          package-manager-cache: false
+
+      - name: Tag und App-Versionen prüfen
+        shell: bash
+        run: |
+          node <<'NODE'
+          const fs = require('node:fs');
+
+          const tag = process.env.RELEASE_TAG;
+          const match = /^v(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)$/.exec(tag);
+          if (!match) {
+            throw new Error(`Ungültiger Release-Tag: ${tag}. Erwartet wird z. B. v0.2.1.`);
+          }
+
+          const expected = match[1];
+          const packageJson = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+          const tauriConfig = JSON.parse(fs.readFileSync('src-tauri/tauri.conf.json', 'utf8'));
+          const cargoToml = fs.readFileSync('src-tauri/Cargo.toml', 'utf8');
+          const cargoVersion = /^version\s*=\s*"([^"]+)"/m.exec(cargoToml)?.[1];
+
+          const versions = {
+            'package.json': packageJson.version,
+            'tauri.conf.json': tauriConfig.version,
+            'Cargo.toml': cargoVersion,
+          };
+
+          const mismatches = Object.entries(versions)
+            .filter(([, version]) => version !== expected)
+            .map(([file, version]) => `${file}: ${version ?? 'fehlt'}`);
+
+          if (mismatches.length > 0) {
+            throw new Error(
+              `Der Tag ${tag} erwartet Version ${expected}, aber folgende Dateien weichen ab:\n` +
+              mismatches.join('\n')
+            );
+          }
+
+          console.log(`Release ${tag} ist konsistent.`);
+          NODE
+
+  prepare-release:
+    name: Release-Entwurf vorbereiten
+    needs: validate
+    runs-on: ubuntu-22.04
+    outputs:
+      release_id: ${{ steps.release.outputs.release_id }}
+      release_url: ${{ steps.release.outputs.release_url }}
+
+    steps:
+      - name: Repository und Release-Tag auschecken
+        uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: GitHub-Release-Entwurf erstellen oder wiederverwenden
+        id: release
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          cat > release-intro.md <<EOF
+          ## Code Deck ${RELEASE_TAG}
+
+          Lokales Desktop-Dashboard zum Organisieren, Öffnen und Starten von Entwicklungsprojekten.
+
+          ### Download
+          - **Windows:** `.msi` oder `-setup.exe`
+          - **macOS:** `.dmg` (Universal-Build für Intel und Apple Silicon)
+          - **Linux:** `.AppImage` oder `.deb`
+
+          > Hinweis: Die Builds sind derzeit nicht mit einem kostenpflichtigen Plattform-Zertifikat signiert. Windows SmartScreen oder macOS Gatekeeper können deshalb beim ersten Start nachfragen.
+          EOF
+
+          if gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
+            draft=$(gh api "repos/${GITHUB_REPOSITORY}/releases/tags/${RELEASE_TAG}" --jq '.draft')
+            if [[ "$draft" != "true" ]]; then
+              echo "::error::Für ${RELEASE_TAG} existiert bereits ein veröffentlichter Release. Bitte verwende einen neuen Tag."
+              exit 1
+            fi
+            echo "Vorhandener Release-Entwurf wird wiederverwendet."
+          else
+            prerelease_args=()
+            if [[ "$RELEASE_TAG" == *-* ]]; then
+              prerelease_args+=(--prerelease)
+            fi
+
+            gh release create "$RELEASE_TAG" \
+              --draft \
+              --verify-tag \
+              --title "Code Deck ${RELEASE_TAG}" \
+              --generate-notes \
+              --notes-file release-intro.md \
+              "${prerelease_args[@]}"
+          fi
+
+          release_id=$(gh api "repos/${GITHUB_REPOSITORY}/releases/tags/${RELEASE_TAG}" --jq '.id')
+          release_url=$(gh api "repos/${GITHUB_REPOSITORY}/releases/tags/${RELEASE_TAG}" --jq '.html_url')
+          echo "release_id=${release_id}" >> "$GITHUB_OUTPUT"
+          echo "release_url=${release_url}" >> "$GITHUB_OUTPUT"
+
+  build:
+    name: ${{ matrix.name }}
+    needs: prepare-release
+    runs-on: ${{ matrix.platform }}
+
     strategy:
       fail-fast: false
       matrix:
         include:
-          - platform: macos-15
-            args: --target universal-apple-darwin
-          - platform: ubuntu-22.04
+          - name: Windows
+            platform: windows-latest
             args: ""
-          - platform: windows-latest
+            rust_targets: ""
+          - name: Linux
+            platform: ubuntu-22.04
             args: ""
+            rust_targets: ""
+          - name: macOS Universal
+            platform: macos-15
+            args: "--target universal-apple-darwin"
+            rust_targets: "aarch64-apple-darwin,x86_64-apple-darwin"
 
-    runs-on: ${{ matrix.platform }}
 
     steps:
-      - name: Checkout repository
+      - name: Repository und Release-Tag auschecken
         uses: actions/checkout@v7
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          fetch-depth: 0
+          persist-credentials: false
 
-      - name: Set up pnpm
+      - name: pnpm einrichten
         uses: pnpm/action-setup@v6
         with:
-          version: 10.33.0
+          version: ${{ env.PNPM_VERSION }}
+          run_install: false
 
-      - name: Set up Node.js
+      - name: Node.js 24 mit pnpm-Cache einrichten
         uses: actions/setup-node@v6
         with:
-          node-version: 24
+          node-version: ${{ env.NODE_VERSION }}
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
+          package-manager-cache: false
 
-      - name: Set up Rust
+      - name: Rust stable einrichten
         uses: dtolnay/rust-toolchain@stable
         with:
-          targets: ${{ matrix.platform == 'macos-15' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }}
+          targets: ${{ matrix.rust_targets }}
 
-      - name: Cache Rust build artifacts
+      - name: Rust-Buildcache einrichten
         uses: swatinem/rust-cache@v2
         with:
           workspaces: src-tauri -> target
+          shared-key: release-${{ matrix.platform }}
 
-      - name: Install Linux system dependencies
+      - name: Linux-Systempakete installieren
         if: matrix.platform == 'ubuntu-22.04'
+        shell: bash
         run: |
           sudo apt-get update
           sudo apt-get install -y \
@@ -61,17 +210,41 @@ jobs:
             patchelf \
             xdg-utils
 
-      - name: Install frontend dependencies
+      - name: Frontend-Abhängigkeiten reproduzierbar installieren
         run: pnpm install --frozen-lockfile
 
-      - name: Build and publish Tauri application
+      - name: Tauri-App bauen und Release-Artefakte hochladen
         uses: tauri-apps/tauri-action@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          tagName: ${{ github.ref_name }}
-          releaseName: "Code Deck ${{ github.ref_name }}"
-          releaseBody: "See CHANGELOG.md for details."
+          releaseId: ${{ needs.prepare-release.outputs.release_id }}
+          tagName: ${{ env.RELEASE_TAG }}
           releaseDraft: true
-          prerelease: false
+          prerelease: ${{ contains(env.RELEASE_TAG, '-') }}
+          retryAttempts: 2
+          releaseAssetNamePattern: "Code-Deck_[version]_[platform]_[arch][setup][ext]"
+          uploadWorkflowArtifacts: true
+          workflowArtifactNamePattern: "Code-Deck_[version]_[platform]_[arch]_[bundle]"
           args: ${{ matrix.args }}
+
+  done:
+    name: Release bereit
+    needs:
+      - prepare-release
+      - build
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: Zusammenfassung schreiben
+        shell: bash
+        run: |
+          {
+            echo "## Code Deck ${RELEASE_TAG} ist gebaut"
+            echo
+            echo "Alle Plattform-Artefakte wurden in den Release-Entwurf hochgeladen."
+            echo
+            echo "Öffne den Entwurf unter: ${{ needs.prepare-release.outputs.release_url }}"
+            echo
+            echo "Prüfe die Dateien und klicke anschließend auf **Publish release**."
+          } >> "$GITHUB_STEP_SUMMARY"
