wip

Author: tangrufus

.github/workflows/release.yml

@@ -11,8 +11,11 @@ on:
         type: number
         required: true
 
-permissions:
-  contents: read
+concurrency:
+  group: ${{ github.workflow }}-${{ inputs.version }}
+  cancel-in-progress: true
+
+permissions: {}
 
 jobs:
   release-drafter:

.github/workflows/test.yml

@@ -200,8 +200,7 @@ jobs:
       - run: go test -count=1 -shuffle=on ./...
 
   dispatch:
-    # TODO!
-    # if: github.event_name == 'push' && github.ref_type == 'tag'
+    if: github.event_name == 'push' && github.ref_type == 'tag'
     needs:
       - pest
       - e2e
@@ -222,3 +221,63 @@ jobs:
           VERSION: ${{ github.ref_name }}
           RUN_ID: ${{ github.run_id }}
           GH_TOKEN: ${{ github.token }}
+
+
+  goreleaser:
+    runs-on: ubuntu-latest
+    needs:
+      - pest
+      - e2e
+    permissions:
+      # For GoReleaser
+      contents: write
+      # For actions/attest
+      id-token: write
+      attestations: write
+      artifact-metadata: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        with:
+          go-version: stable
+
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: php-matrix_linux_arm64
+          path: out/linux_arm64
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: php-matrix_linux_amd64
+          path: out/linux_amd64
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: php-matrix_darwin_arm64
+          path: out/darwin_arm64
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: php-matrix_darwin_amd64
+          path: out/darwin_amd64
+
+
+      # TODO!
+      - run: ls -laR out
+
+      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        id: app-token
+        with:
+          client-id: ${{ vars.TASTENDRUCK_CLIENT_ID }}
+          private-key: ${{ secrets.TASTENDRUCK_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: homebrew-tap
+          permission-contents: write
+
+      - uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
+        with:
+          version: "~> v2"
+          args: release --clean --snapshot
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GORELEASER_HOMEBREW_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}