Merge pull request #2900 from SasView/release_6_into_main #135
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Nightly Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| #Reuse ci.yml workflow on main branch and upload artifacts to release page | |
| reuse_main_ci: | |
| uses: ./.github/workflows/ci.yml | |
| secrets: inherit | |
| upload_nighly_builds: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ macos-latest] | |
| python-version: [ 3.11 ] | |
| needs: reuse_main_ci | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Retrieve saved artifacts | |
| uses: actions/download-artifact@v3 | |
| with: | |
| path: installers/dist | |
| - name: Display structure of downloaded files | |
| run: ls -R | |
| working-directory: installers/dist | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Sign executable and create dmg (OSX) | |
| if: ${{ matrix.installer && startsWith(matrix.os, 'macos') }} | |
| env: | |
| MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }} | |
| MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }} | |
| run: | | |
| echo $MACOS_CERTIFICATE | base64 --decode > certificate.p12 | |
| security create-keychain -p DloaAcYP build.keychain | |
| security default-keychain -s build.keychain | |
| security unlock-keychain -p DloaAcYP build.keychain | |
| security import certificate.p12 -k build.keychain -P $MACOS_CERTIFICATE_PWD -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k DloaAcYP build.keychain | |
| cd installers/dist | |
| python ../../build_tools/fix_qt_folder_names_for_codesign.py SasView5.app | |
| python ../../build_tools/code_sign_osx.py | |
| codesign --verify --options=runtime --entitlements ../../build_tools/entitlements.plist --timestamp --deep --verbose=4 --force --sign "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.app | |
| hdiutil create SasView5.dmg -srcfolder SasView5.app -ov -format UDZO | |
| codesign -s "Developer ID Application: European Spallation Source Eric (W2AG9MPZ43)" SasView5.dmg | |
| - name: Rename artifacts | |
| run: | | |
| mv installers/dist/SasView-Installer-windows-*/setupSasView.exe installers/dist/setupSasView-nightly-Win64.exe | |
| mv installers/dist/SasView-Installer-macos-*/SasView6.dmg installers/dist/SasView-nightly-MacOSX.dmg | |
| mv installers/dist/SasView-Installer-ubuntu-*/sasview6.tar.gz installers/dist/SasView-nightly-Linux.tar.gz | |
| - name: Notarize Release Build (OSX) | |
| uses: lando/notarize-action@v2 | |
| with: | |
| product-path: "installers/dist/SasView-nightly-MacOSX.dmg" | |
| primary-bundle-id: "org.sasview.SasView6" | |
| appstore-connect-username: ${{ secrets.NOTARIZATION_USERNAME }} | |
| appstore-connect-password: ${{ secrets.NOTARIZATION_PASSWORD }} | |
| appstore-connect-team-id: W2AG9MPZ43 | |
| verbose: True | |
| - name: Staple Release Build (OSX) | |
| uses: BoundfoxStudios/action-xcode-staple@v1 | |
| with: | |
| product-path: "installers/dist/SasView-nightly-MacOSX.dmg" | |
| - name: Upload Nightly Build Installer to GitHub releases | |
| uses: ncipollo/release-action@v1 | |
| with: | |
| draft: false | |
| prerelease: true | |
| allowUpdates: true | |
| replacesArtifacts: true | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| artifacts: "installers/dist/setupSasView-nightly-Win64.exe, installers/dist/SasView-nightly-MacOSX.dmg, installers/dist/SasView-nightly-Linux.tar.gz" | |
| body: "Nightly build of main SasView branch" | |
| name: "nightly-build" | |
| tag: "nightly-build" |