Updated CD

Author: marcobambini

.github/workflows/main.yml

@@ -8,6 +8,16 @@ on:
       - "*.*.*"
   pull_request:
   workflow_dispatch:
+    inputs:
+      release_version:
+        description: "Optional tag/version to release after successful builds, for example 1.0.0. Leave empty for build-only."
+        required: false
+        type: string
+      prerelease:
+        description: "Mark a manual release as prerelease."
+        required: false
+        default: false
+        type: boolean
 
 concurrency:
   group: sqlite-columnar-${{ github.workflow }}-${{ github.ref }}
@@ -192,7 +202,7 @@ jobs:
         run: 'sqlite3 :memory: ".load ./dist/columnar" "SELECT columnar_version();"'
 
       - name: validate macOS signing secrets
-        if: startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         env:
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
           CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
@@ -212,7 +222,7 @@ jobs:
           exit "$missing"
 
       - name: create keychain for macOS codesign
-        if: startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         env:
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
           CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
@@ -231,7 +241,7 @@ jobs:
           security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
 
       - name: codesign macOS dylib
-        if: startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         env:
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: |
@@ -247,14 +257,18 @@ jobs:
           printf "%s\n" "${{ github.sha }}" > package/GIT_COMMIT
 
       - name: notarize macOS release archive
-        if: startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         env:
           APPLE_ID: ${{ secrets.APPLE_ID }}
           APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: |
           set -euo pipefail
-          VERSION="${GITHUB_REF_NAME}"
+          if [ "${GITHUB_REF#refs/tags/}" != "$GITHUB_REF" ]; then
+            VERSION="$GITHUB_REF_NAME"
+          else
+            VERSION="${{ github.event.inputs.release_version }}"
+          fi
           RELEASE_DIR="release/${{ matrix.artifact }}-${VERSION}"
           RELEASE_ZIP="release/${{ matrix.artifact }}-${VERSION}.zip"
           mkdir -p "$RELEASE_DIR"
@@ -263,42 +277,53 @@ jobs:
           xcrun notarytool submit "$RELEASE_ZIP" --apple-id "$APPLE_ID" --password "$APPLE_PASSWORD" --team-id "$APPLE_TEAM_ID" --wait
 
       - name: cleanup macOS signing keychain
-        if: always() && startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: always() && (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         run: |
           rm -f "$RUNNER_TEMP/developer_id_application.p12"
           security delete-keychain "$RUNNER_TEMP/columnar-signing.keychain-db" || true
 
       - uses: actions/upload-artifact@v4.6.2
-        if: startsWith(github.ref, 'refs/tags/') && matrix.notarize
+        if: (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) && matrix.notarize
         with:
           name: ${{ matrix.artifact }}
           path: release/*.zip
           if-no-files-found: error
           retention-days: 14
 
       - uses: actions/upload-artifact@v4.6.2
-        if: ${{ !startsWith(github.ref, 'refs/tags/') || !matrix.notarize }}
+        if: ${{ !(startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')) || !matrix.notarize }}
         with:
           name: ${{ matrix.artifact }}
           path: package/
           if-no-files-found: error
           retention-days: 14
 
   release:
-    if: startsWith(github.ref, 'refs/tags/')
+    if: startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && github.event.inputs.release_version != '')
     needs: build
     runs-on: ubuntu-22.04
     permissions:
       contents: write
     steps:
+      - name: resolve release version
+        id: release
+        run: |
+          set -euo pipefail
+          if [ "${GITHUB_REF#refs/tags/}" != "$GITHUB_REF" ]; then
+            VERSION="$GITHUB_REF_NAME"
+          else
+            VERSION="${{ github.event.inputs.release_version }}"
+          fi
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
       - uses: actions/download-artifact@v4.2.1
         with:
           path: artifacts
 
       - name: package release archives
         run: |
           set -e
-          VERSION="${GITHUB_REF_NAME}"
+          VERSION="${{ steps.release.outputs.version }}"
           mkdir -p release
           for dir in artifacts/columnar-*; do
             name="$(basename "$dir")"
@@ -312,6 +337,10 @@ jobs:
 
       - uses: softprops/action-gh-release@v2
         with:
+          tag_name: ${{ steps.release.outputs.version }}
+          target_commitish: ${{ github.sha }}
+          generate_release_notes: true
+          prerelease: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.prerelease == 'true' }}
           files: |
             release/*.zip
             release/*.tar.gz

test/columnar-robustness-test.c

@@ -12,8 +12,10 @@
 #include <stdarg.h>
 #include <stdlib.h>
 #include <string.h>
+#ifndef _WIN32
 #include <sys/wait.h>
 #include <unistd.h>
+#endif
 
 static void fatal(sqlite3 *db, const char *zMsg, int rc){
   fprintf(stderr, "%s: %s (%d)\n", zMsg, db ? sqlite3_errmsg(db) : "", rc);
@@ -320,6 +322,7 @@ static void test_api_fuzz(sqlite3 *db){
   expect_error(db, "wrong table type", "SELECT columnar_count(123,'v')");
 }
 
+#ifndef _WIN32
 static void create_crash_db(const char *zDb, const char *zExt){
   sqlite3 *db = 0;
   unlink(zDb);
@@ -375,6 +378,7 @@ static void test_crash_recovery(const char *zExt){
   close_db(db);
   unlink(zDb);
 }
+#endif
 
 int main(int argc, char **argv){
   const char *zExt = argc>1 ? argv[1] : "./columnar";
@@ -387,7 +391,9 @@ int main(int argc, char **argv){
   test_rollback(db);
   test_fuzz_names(db);
   close_db(db);
+#ifndef _WIN32
   test_crash_recovery(zExt);
+#endif
   printf("columnar robustness tests passed\n");
   return 0;
 }