修雨
430d20f2ee
Add scripts/release/sync-to-oss.sh and wire it into release.yml. After the GitHub release, artifacts (binaries, checksums, dws-skills.zip) plus the install scripts are pushed to an OSS bucket in the <base>/<version>/<file> layout the install.sh DWS_RELEASE_BASE switch expects, with a latest.txt pointer. Gated on OSS_* repo secrets: skips cleanly when unset, so forks without the secrets keep releasing to GitHub only.
86 lines
2.7 KiB
YAML
86 lines
2.7 KiB
YAML
name: Release
|
||
|
||
on:
|
||
push:
|
||
tags:
|
||
- "v*"
|
||
workflow_dispatch:
|
||
|
||
permissions:
|
||
contents: write
|
||
|
||
jobs:
|
||
release:
|
||
runs-on: ubuntu-latest
|
||
timeout-minutes: 30
|
||
|
||
steps:
|
||
- name: Check out repository
|
||
uses: actions/checkout@v4
|
||
with:
|
||
fetch-depth: 0
|
||
|
||
- name: Set up Go
|
||
uses: actions/setup-go@v5
|
||
with:
|
||
go-version-file: go.mod
|
||
|
||
- name: Install archive tooling
|
||
run: sudo apt-get update && sudo apt-get install -y zip unzip
|
||
|
||
- name: Install rcodesign (ad-hoc sign darwin binaries from Linux)
|
||
run: |
|
||
set -eu
|
||
RCS_VERSION="0.27.0"
|
||
curl -fsSL -o /tmp/rcodesign.tar.gz \
|
||
"https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F${RCS_VERSION}/apple-codesign-${RCS_VERSION}-x86_64-unknown-linux-musl.tar.gz"
|
||
mkdir -p /tmp/rcodesign
|
||
tar -xzf /tmp/rcodesign.tar.gz -C /tmp/rcodesign --strip-components=1
|
||
sudo install -m 0755 /tmp/rcodesign/rcodesign /usr/local/bin/rcodesign
|
||
rcodesign --version
|
||
|
||
- name: Run GoReleaser
|
||
uses: goreleaser/goreleaser-action@v6
|
||
with:
|
||
version: "~> v2"
|
||
args: release --clean
|
||
env:
|
||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||
|
||
- name: Post-release packaging
|
||
run: ./scripts/release/post-goreleaser.sh
|
||
env:
|
||
DWS_PACKAGE_VERSION: ${{ github.ref_name }}
|
||
|
||
- name: Upload dws-skills.zip to release
|
||
env:
|
||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||
run: |
|
||
gh release upload "${{ github.ref_name }}" dist/dws-skills.zip --clobber
|
||
|
||
- name: Sync release to China OSS mirror
|
||
# 自动同步到国内镜像，供 install.sh 的 DWS_RELEASE_BASE 开关消费。
|
||
# 脚本自带门控：未配置 OSS_* secret 时优雅跳过，不影响海外发布。
|
||
run: ./scripts/release/sync-to-oss.sh
|
||
env:
|
||
VERSION: ${{ github.ref_name }}
|
||
OSS_ACCESS_KEY_ID: ${{ secrets.OSS_ACCESS_KEY_ID }}
|
||
OSS_ACCESS_KEY_SECRET: ${{ secrets.OSS_ACCESS_KEY_SECRET }}
|
||
OSS_ENDPOINT: ${{ secrets.OSS_ENDPOINT }}
|
||
OSS_BUCKET: ${{ secrets.OSS_BUCKET }}
|
||
OSS_PREFIX: ${{ secrets.OSS_PREFIX }}
|
||
|
||
- name: Setup Node.js
|
||
uses: actions/setup-node@v4
|
||
with:
|
||
node-version: "20"
|
||
registry-url: "https://registry.npmjs.org"
|
||
|
||
- name: Publish to npm
|
||
# 只有官方仓库发 npm；fork（dev 预览）没有 NPM_TOKEN，跳过以免红叉
|
||
if: ${{ github.repository_owner == 'DingTalk-Real-AI' }}
|
||
working-directory: dist/npm/dingtalk-workspace-cli
|
||
run: npm publish --access public
|
||
env:
|
||
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|