release.yml

name: Build and Release

on:
  push:
    tags:
      - "v*"

jobs:
  build:
    permissions:
      contents: read

    defaults:
      run:
        shell: pwsh

    strategy:
      fail-fast: false
      matrix:
        include:
          - os: windows-latest
            runtime: win-x64
            artifact: mdterm-win-x64
          - os: ubuntu-latest
            runtime: linux-x64
            artifact: mdterm-linux-x64
          - os: macos-15
            runtime: osx-x64
            artifact: mdterm-osx-x64
          - os: macos-latest
            runtime: osx-arm64
            artifact: mdterm-osx-arm64

    runs-on: ${{ matrix.os }}

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup .NET
        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v4.1.0
        with:
          dotnet-version: "9.0.x"

      - name: Extract version
        id: version
        run: |
          $version = $env:GITHUB_REF_NAME -replace '^v', ''
          Write-Output "version=$version" >> $env:GITHUB_OUTPUT

      - name: Publish
        run: dotnet publish MdTerm.csproj -c Release -r ${{ matrix.runtime }} --self-contained -p:PublishSingleFile=true -p:Version=${{ steps.version.outputs.version }} -o ./publish

      - name: Install CycloneDX tool
        run: dotnet tool install --global CycloneDX --version 5.4.0

      - name: Generate SBOM
        run: dotnet CycloneDX MdTerm.csproj -o ./publish --filename sbom-bom.xml

      - name: Upload artifact
        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
        with:
          name: ${{ matrix.artifact }}
          path: ./publish/

  release:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Download all artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          path: ./artifacts

      - name: Package artifacts
        run: |
          [ -d artifacts/mdterm-win-x64 ] && (cd artifacts/mdterm-win-x64 && zip -r ../../mdterm-win-x64.zip .)
          [ -d artifacts/mdterm-linux-x64 ] && tar czf mdterm-linux-x64.tar.gz -C artifacts/mdterm-linux-x64 .
          [ -d artifacts/mdterm-osx-x64 ] && tar czf mdterm-osx-x64.tar.gz -C artifacts/mdterm-osx-x64 .
          [ -d artifacts/mdterm-osx-arm64 ] && tar czf mdterm-osx-arm64.tar.gz -C artifacts/mdterm-osx-arm64 .

      - name: Create GitHub Release
        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
        with:
          generate_release_notes: true
          files: |
            mdterm-*.zip
            mdterm-*.tar.gz

  publish-packages:
    needs: release
    runs-on: ubuntu-latest
    permissions:
      contents: write
    env:
      SCOOP_BUCKET_TOKEN: ${{ secrets.SCOOP_BUCKET_TOKEN }}
      CHOCOLATEY_API_KEY: ${{ secrets.CHOCOLATEY_API_KEY }}
      HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
      SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
      AUR_SSH_PRIVATE_KEY: ${{ secrets.AUR_SSH_PRIVATE_KEY }}

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Download release artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          path: ./artifacts

      - name: Package artifacts
        run: |
          [ -d artifacts/mdterm-win-x64 ] && (cd artifacts/mdterm-win-x64 && zip -r ../../mdterm-win-x64.zip .)
          [ -d artifacts/mdterm-linux-x64 ] && tar czf mdterm-linux-x64.tar.gz -C artifacts/mdterm-linux-x64 .
          [ -d artifacts/mdterm-osx-x64 ] && tar czf mdterm-osx-x64.tar.gz -C artifacts/mdterm-osx-x64 .
          [ -d artifacts/mdterm-osx-arm64 ] && tar czf mdterm-osx-arm64.tar.gz -C artifacts/mdterm-osx-arm64 .

      - name: Extract version
        id: version
        run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

      - name: Compute SHA256 hashes
        id: hashes
        run: |
          echo "win_x64=$(sha256sum mdterm-win-x64.zip | awk '{print $1}')" >> "$GITHUB_OUTPUT"
          echo "linux_x64=$(sha256sum mdterm-linux-x64.tar.gz | awk '{print $1}')" >> "$GITHUB_OUTPUT"
          echo "osx_x64=$(sha256sum mdterm-osx-x64.tar.gz | awk '{print $1}')" >> "$GITHUB_OUTPUT"
          echo "osx_arm64=$(sha256sum mdterm-osx-arm64.tar.gz | awk '{print $1}')" >> "$GITHUB_OUTPUT"

          curl -sL "https://github.com/fasterinnerlooper/mdterm/archive/refs/tags/v${{ steps.version.outputs.version }}.tar.gz" | sha256 | awk '{print $1}' | tr -d '\n' > source_hash.txt
          echo "source=$(cat source_hash.txt)" >> "$GITHUB_OUTPUT"

      - name: Render packaging templates
        run: |
          VERSION="${{ steps.version.outputs.version }}"

          render() {
            sed \
              -e "s/VERSION_PLACEHOLDER/${VERSION}/g" \
              -e "s/SHA256_PLACEHOLDER/${{ steps.hashes.outputs.source }}/g" \
              -e "s/SHA256_ARM64_PLACEHOLDER/${{ steps.hashes.outputs.osx_arm64 }}/g" \
              -e "s/SHA256_WIN_PLACEHOLDER/${{ steps.hashes.outputs.win_x64 }}/g" \
              -e "s/SHA256_X64_PLACEHOLDER/${{ steps.hashes.outputs.osx_x64 }}/g" \
              -e "s/SHA256_LINUX_PLACEHOLDER/${{ steps.hashes.outputs.linux_x64 }}/g" \
              "$1"
          }

          # Winget
          mkdir -p rendered/winget
          for f in packaging/winget/*; do
            render "$f" > "rendered/winget/$(basename "$f")"
          done

          # Scoop
          mkdir -p rendered/scoop
          render packaging/scoop/mdterm.json > rendered/scoop/mdterm.json

          # Chocolatey
          mkdir -p rendered/chocolatey/tools
          render packaging/chocolatey/mdterm.nuspec > rendered/chocolatey/mdterm.nuspec
          render packaging/chocolatey/tools/chocolateyInstall.ps1 > rendered/chocolatey/tools/chocolateyInstall.ps1

          # Homebrew
          mkdir -p rendered/homebrew
          render packaging/homebrew/mdterm.rb > rendered/homebrew/mdterm.rb

          # AUR
          mkdir -p rendered/aur
          render packaging/aur/PKGBUILD > rendered/aur/PKGBUILD
          render packaging/aur/.SRCINFO > rendered/aur/.SRCINFO

      - name: Commit rendered packaging
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          cp -r rendered/* packaging/
          git add packaging/
          git diff --cached --quiet || git commit -m "chore: update packaging for v${{ steps.version.outputs.version }} [skip ci]"
          git push origin HEAD:main

      # ── Winget ──────────────────────────────────────────────
      - name: Publish to Winget
        uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2
        with:
          identifier: fasterinnerlooper.mdterm
          installers-regex: '\.zip$'
          token: ${{ secrets.WINGET_TOKEN }}
        continue-on-error: true

      # ── Scoop ───────────────────────────────────────────────
      - name: Publish to Scoop bucket
        if: env.SCOOP_BUCKET_TOKEN != ''
        run: |
          git clone "https://x-access-token:$SCOOP_BUCKET_TOKEN@github.com/fasterinnerlooper/scoop-bucket.git" scoop-bucket
          mkdir -p scoop-bucket/bucket
          cp rendered/scoop/mdterm.json scoop-bucket/bucket/
          cd scoop-bucket
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add bucket/mdterm.json
          git commit -m "mdterm: update to v${{ steps.version.outputs.version }}"
          git push
        continue-on-error: true

      # ── Chocolatey ──────────────────────────────────────────
      - name: Publish to Chocolatey
        if: env.CHOCOLATEY_API_KEY != ''
        run: |
          dotnet tool install -g NuGet.CommandLine
          nuget pack rendered/chocolatey/mdterm.nuspec -OutputDirectory rendered/chocolatey
          nuget push rendered/chocolatey/mdterm.*.nupkg \
            -Source "https://push.chocolatey.org/" \
            -ApiKey "$CHOCOLATEY_API_KEY"
        continue-on-error: true

      # ── Snap Store ──────────────────────────────────────────
      - name: Prepare Snap build
        if: env.SNAPCRAFT_STORE_CREDENTIALS != ''
        run: mkdir -p snap && cp packaging/snap/snapcraft.yaml snap/snapcraft.yaml
      - name: Build Snap package
        if: env.SNAPCRAFT_STORE_CREDENTIALS != ''
        id: snap_build
        uses: snapcore/action-build@3bdaa03e1ba6bf59a65f84a751d943d549a54e79 # v1
      - name: Publish to Snap Store
        if: env.SNAPCRAFT_STORE_CREDENTIALS != ''
        uses: snapcore/action-publish@214b86e5ca036ead1668c79afb81e550e6c54d40 # v1
        with:
          store: stable
          snap: ${{ steps.snap_build.outputs.snap }}
          release: stable
        env:
          SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAPCRAFT_STORE_CREDENTIALS }}
        continue-on-error: true

      # ── AUR ─────────────────────────────────────────────────
      - name: Publish to AUR
        if: env.AUR_SSH_PRIVATE_KEY != ''
        uses: KSXGitHub/github-actions-deploy-aur@2ac5a4c1d7035885d46b10e3193393be8460b6f1 # v4.1.1
        with:
          pkgname: mdterm
          pkgbuild: ./rendered/aur/PKGBUILD
          srcinfo: ./rendered/aur/.SRCINFO
          commit_username: "mdterm-bot"
          commit_email: "bot@mdterm.dev"
          ssh_private_key: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
          commit_message: "Update to v${{ steps.version.outputs.version }}"
        continue-on-error: true