CommDesk/.github/workflows/tauri-all-platforms.yml at master · NexGenStudioDev/CommDesk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
name: Tauri Release (All Platforms + Updater)

on:
  workflow_dispatch:
    inputs:
      tag_name:
        description: "Release tag (for example: v0.1.1)"
        required: true
        type: string
  push:
    tags:
      - "v*"

permissions:
  contents: write

jobs:
  release:
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-24.04
            args: "--config src-tauri/tauri.release.conf.json"
          - os: windows-latest
            args: "--config src-tauri/tauri.release.conf.json"
          - os: macos-latest
            args: "--config src-tauri/tauri.release.conf.json"

    runs-on: ${{ matrix.os }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Linux dependencies
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            libwebkit2gtk-4.1-dev \
            libjavascriptcoregtk-4.1-dev \
            libsoup-3.0-dev \
            libgtk-3-dev \
            libayatana-appindicator3-dev \
            librsvg2-dev \
            patchelf \
            rpm
          if apt-cache show libfuse2t64 >/dev/null 2>&1; then
            sudo apt-get install -y libfuse2t64
          else
            sudo apt-get install -y libfuse2
          fi

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        with:
          version: 10
          run_install: false

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Cache Rust
        uses: swatinem/rust-cache@v2
        with:
          workspaces: |
            src-tauri -> target

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Security audit
        run: npm audit --omit=dev --audit-level=high

      - name: Build and publish signed bundles
        uses: tauri-apps/tauri-action@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        with:
          tagName: ${{ github.event_name == 'workflow_dispatch' && inputs.tag_name || github.ref_name }}
          releaseName: CommDesk ${{ github.event_name == 'workflow_dispatch' && inputs.tag_name || github.ref_name }}
          releaseBody: See the assets to download and install this version.
          releaseDraft: false
          prerelease: false
          uploadUpdaterJson: true
          updaterJsonPreferNsis: false
          uploadUpdaterSignatures: true
          uploadWorkflowArtifacts: true
          workflowArtifactNamePattern: "[platform]-[arch]-[bundle]"
          args: ${{ matrix.args }}