v3.23.3 #43
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Create Slim Releases | |
| on: | |
| release: | |
| types: | |
| - published | |
| jobs: | |
| package: | |
| runs-on: ${{ matrix.runner }} | |
| env: | |
| TERM: xterm | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| runner: | |
| - macos-14 | |
| - ubuntu-24.04 | |
| node-version: | |
| - '18' | |
| os: | |
| - linux | |
| - macos | |
| - win | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Install node ${{ matrix.node-version }} | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: npm | |
| - name: Install dependencies | |
| run: npm clean-install --prefer-offline --frozen-lockfile --production | |
| - name: Prepare Release | |
| uses: lando/prepare-release-action@v3 | |
| with: | |
| sync: false | |
| - name: Ensure version | |
| run: node ./bin/lando version | |
| - name: Package into node binary | |
| uses: lando/pkg-action@v5 | |
| with: | |
| entrypoint: bin/lando | |
| node-version: ${{ matrix.node-version }} | |
| os: ${{ matrix.os }} | |
| options: --options dns-result-order=ipv4first | |
| - name: Ensure slimcore | |
| if: matrix.os == 'linux' && runner.os == 'Linux' && runner.arch == 'X64' | |
| run: ./dist/@lando/cli config --path fatcore | grep false | |
| - name: Ensure ipv4first | |
| if: matrix.os == 'linux' && runner.os == 'Linux' && runner.arch == 'X64' | |
| run: ./dist/@lando/cli config --path cli.args | grep dns-result-order=ipv4first | |
| sign-n-deploy: | |
| runs-on: ${{ matrix.os }} | |
| needs: | |
| - package | |
| env: | |
| TERM: xterm | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - os: windows-2022 | |
| key: cli-node18-win-x64-${{ github.sha }} | |
| file: lando/cli.exe | |
| certificate-data: KEYLOCKER_CLIENT_CERT | |
| certificate-password: KEYLOCKER_CLIENT_CERT_PASSWORD | |
| result: lando-win-x64-${{ github.ref_name }}-slim.exe | |
| - os: windows-2022 | |
| key: cli-node18-win-arm64-${{ github.sha }} | |
| file: lando/cli.exe | |
| certificate-data: KEYLOCKER_CLIENT_CERT | |
| certificate-password: KEYLOCKER_CLIENT_CERT_PASSWORD | |
| result: lando-win-arm64-${{ github.ref_name }}-slim.exe | |
| - os: macos-13 | |
| key: cli-node18-macos-x64-${{ github.sha }} | |
| file: lando/cli | |
| certificate-data: APPLE_CERT_DATA | |
| certificate-password: APPLE_CERT_PASSWORD | |
| apple-product-id: dev.lando.cli | |
| apple-team-id: FY8GAUX282 | |
| apple-notary-user: APPLE_NOTARY_USER | |
| apple-notary-password: APPLE_NOTARY_PASSWORD | |
| options: --options runtime --entitlements entitlements.xml | |
| result: lando-macos-x64-${{ github.ref_name }}-slim | |
| - os: macos-13 | |
| key: cli-node18-macos-arm64-${{ github.sha }} | |
| file: lando/cli | |
| certificate-data: APPLE_CERT_DATA | |
| certificate-password: APPLE_CERT_PASSWORD | |
| apple-product-id: dev.lando.cli | |
| apple-team-id: FY8GAUX282 | |
| apple-notary-user: APPLE_NOTARY_USER | |
| apple-notary-password: APPLE_NOTARY_PASSWORD | |
| options: --options runtime --entitlements entitlements.xml | |
| result: lando-macos-arm64-${{ github.ref_name }}-slim | |
| - os: ubuntu-24.04 | |
| key: cli-node18-linux-x64-${{ github.sha }} | |
| file: lando/cli | |
| certificate-data: KEYLOCKER_CLIENT_CERT | |
| certificate-password: KEYLOCKER_CLIENT_CERT_PASSWORD | |
| result: lando-linux-x64-${{ github.ref_name }}-slim | |
| - os: ubuntu-24.04 | |
| key: cli-node18-linux-arm64-${{ github.sha }} | |
| file: lando/cli | |
| certificate-data: KEYLOCKER_CLIENT_CERT | |
| certificate-password: KEYLOCKER_CLIENT_CERT_PASSWORD | |
| result: lando-linux-arm64-${{ github.ref_name }}-slim | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v3 | |
| - name: Download ${{ matrix.key }} | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: ${{ matrix.key }} | |
| path: lando | |
| - name: Sign and Notarize | |
| uses: lando/code-sign-action@v2 | |
| id: code-sign-action | |
| with: | |
| file: ${{ matrix.file }} | |
| certificate-data: ${{ secrets[matrix.certificate-data] }} | |
| certificate-password: ${{ secrets[matrix.certificate-password] }} | |
| apple-notary-user: ${{ secrets[matrix.apple-notary-user] }} | |
| apple-notary-password: ${{ secrets[matrix.apple-notary-password] }} | |
| apple-product-id: ${{ matrix.apple-product-id }} | |
| apple-team-id: ${{ matrix.apple-team-id }} | |
| keylocker-host: https://clientauth.one.digicert.com | |
| keylocker-api-key: ${{ secrets.KEYLOCKER_API_KEY }} | |
| keylocker-cert-sha1-hash: ${{ secrets.KEYLOCKER_CERT_SHA1_HASH }} | |
| keylocker-keypair-alias: ${{ secrets.KEYLOCKER_KEYPAIR_ALIAS }} | |
| options: ${{ matrix.options }} | |
| - name: Rename as needed | |
| shell: bash | |
| run: | | |
| mkdir -p releases | |
| cp ${{ steps.code-sign-action.outputs.file }} releases/${{ matrix.result }} | |
| # if a latest release then push to stable tag | |
| if [ "${{ github.event.release.prerelease }}" == "false" ]; then | |
| cp releases/${{ matrix.result }} "releases/$(echo ${{ matrix.result }} | sed 's/${{ github.ref_name }}/stable/;')" | |
| fi | |
| # both latest/stable should push to edge | |
| cp releases/${{ matrix.result }} "releases/$(echo ${{ matrix.result }} | sed 's/${{ github.ref_name }}/edge/;')" | |
| - name: Configure S3 Credentials | |
| uses: aws-actions/configure-aws-credentials@v2 | |
| with: | |
| aws-access-key-id: ${{ secrets.S3_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.S3_SECRET_ACCESS_KEY }} | |
| aws-region: us-east-1 | |
| - name: Upload releases to S3 | |
| shell: bash | |
| run: aws s3 sync releases s3://files.lando.dev/cli | |
| - name: Upload releases to GitHub Releases | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| files: releases/${{ matrix.result }} | |
| fail_on_unmatched_files: true |