workflow: use gh for release asset upload #28
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: tauri-build-windows | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| env_name: | |
| description: "Frontend build mode (development/production/test)" | |
| required: false | |
| default: "production" | |
| push: | |
| tags: | |
| - "v*" | |
| jobs: | |
| build: | |
| # Windows 专用构建 Job： | |
| # - 仅在带有 Windows 标签的 self-hosted Runner 上运行 | |
| # - 不适用于 macOS / Linux 等其他平台 | |
| # 如需支持多平台，请为不同平台创建独立的 workflow 或 job | |
| runs-on: [self-hosted, Windows] | |
| permissions: | |
| contents: write | |
| env: | |
| # 前端构建参数 | |
| # build.cjs reads ENV_NAME; default production | |
| ENV_NAME: ${{ inputs.env_name || 'production' }} | |
| # App config values | |
| APP_SERVER_BASE_URL: ${{ secrets.APP_SERVER_BASE_URL }} | |
| APP_SERVER_VERSION: ${{ secrets.APP_SERVER_VERSION }} | |
| APP_SERVER_SECRET_KEY: ${{ secrets.APP_SERVER_SECRET_KEY }} | |
| APP_UPDATER_CHECK_URL: ${{ secrets.APP_UPDATER_CHECK_URL }} | |
| APP_UPDATER_LATEST_JSON_URL: ${{ secrets.APP_UPDATER_LATEST_JSON_URL }} | |
| APP_UPDATER_TEMP_DIR: ${{ secrets.APP_UPDATER_TEMP_DIR }} | |
| APP_WEBVIEW_DOWNLOAD_URL: ${{ secrets.APP_WEBVIEW_DOWNLOAD_URL }} | |
| # Release 相关上下文 | |
| # - tag push 时 github.ref_name 即为 vX.Y.Z | |
| # - workflow_dispatch 时不会创建 release，仅用于手动构建 | |
| RELEASE_TAG: ${{ github.ref_name }} | |
| # R2 相关配置（若未配置对应 Secret，则相关功能会被跳过或报错） | |
| R2_ACCOUNT_ID: ${{ secrets.R2_ACCOUNT_ID }} | |
| R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }} | |
| R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }} | |
| R2_BUCKET: ${{ secrets.R2_BUCKET }} | |
| R2_PUBLIC_BASE_URL: ${{ secrets.R2_PUBLIC_BASE_URL }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Install dependencies | |
| run: pnpm install --frozen-lockfile | |
| - name: Prepare app config | |
| shell: powershell | |
| run: | | |
| Copy-Item "src-tauri/config.example.toml" "src-tauri/config.production.toml" -Force | |
| $configPath = "src-tauri/config.production.toml" | |
| $content = Get-Content $configPath -Raw | |
| function Set-ConfigValue { | |
| param( | |
| [string]$Pattern, | |
| [string]$Value | |
| ) | |
| if ([string]::IsNullOrWhiteSpace($Value)) { | |
| return | |
| } | |
| $escapedValue = $Value.Replace('\', '\\').Replace('"', '\"') | |
| $script:content = [regex]::Replace( | |
| $script:content, | |
| $Pattern, | |
| ('$1"{0}"' -f $escapedValue), | |
| [System.Text.RegularExpressions.RegexOptions]::Multiline | |
| ) | |
| } | |
| Set-ConfigValue '^(base_url\s*=\s*)".*"$' "${{ env.APP_SERVER_BASE_URL }}" | |
| Set-ConfigValue '^(version\s*=\s*)".*"$' "${{ env.APP_SERVER_VERSION }}" | |
| Set-ConfigValue '^(secret_key\s*=\s*)".*"$' "${{ env.APP_SERVER_SECRET_KEY }}" | |
| Set-ConfigValue '^(check_url\s*=\s*)".*"$' "${{ env.APP_UPDATER_CHECK_URL }}" | |
| Set-ConfigValue '^(latest_json_url\s*=\s*)".*"$' "${{ env.APP_UPDATER_LATEST_JSON_URL }}" | |
| Set-ConfigValue '^(updater_temp_dir\s*=\s*)".*"$' "${{ env.APP_UPDATER_TEMP_DIR }}" | |
| Set-ConfigValue '^(downlaod_url\s*=\s*)".*"$' "${{ env.APP_WEBVIEW_DOWNLOAD_URL }}" | |
| Set-Content -Path $configPath -Value $content -NoNewline | |
| # 在 CI 构建期间使用 fixed 版本的 Tauri 配置 | |
| # 先将 src-tauri/tauri.conf.fixed.json 覆盖为 src-tauri/tauri.conf.json， | |
| # 然后再由 prepare-version.mjs 统一写入最终版本号，确保参与打包的配置版本正确。 | |
| - name: Use fixed Tauri config | |
| shell: powershell | |
| run: | | |
| Copy-Item "src-tauri/tauri.conf.fixed.json" "src-tauri/tauri.conf.json" -Force | |
| - name: Prepare version from tag | |
| # For release events, GITHUB_REF_NAME is usually "vX.Y.Z" as well. | |
| run: node deploy/prepare-version.mjs | |
| # Build and bundle the Tauri app. | |
| # It will run `beforeBuildCommand` from `src-tauri/tauri.conf.json` (node build.cjs -> pnpm build:<env>) | |
| - name: Build Tauri app | |
| uses: tauri-apps/tauri-action@v0 | |
| env: | |
| # 使用统一的 GT_TOKEN 作为凭证来源 | |
| GITHUB_TOKEN: ${{ secrets.GT_TOKEN }} | |
| # Optional: enable updater signing / release signing if you configure them later | |
| TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }} | |
| TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }} | |
| with: | |
| projectPath: . | |
| # 与本地一致，使用 production feature 进行构建 | |
| args: --features production | |
| - name: Generate latest.json | |
| run: node deploy/generate-latest-json.mjs | |
| - name: Publish GitHub release assets | |
| if: github.event_name == 'push' | |
| shell: powershell | |
| env: | |
| GH_TOKEN: ${{ secrets.GT_TOKEN }} | |
| GH_REPO: ${{ github.repository }} | |
| run: | | |
| $ErrorActionPreference = "Stop" | |
| if (-not (Get-Command gh -ErrorAction SilentlyContinue)) { | |
| Write-Error "gh CLI not found. Please install GitHub CLI and ensure 'gh' is in PATH." | |
| } | |
| $tag = "${{ env.RELEASE_TAG }}" | |
| $installer = Get-ChildItem "src-tauri/target/release/bundle/nsis" -Filter *.exe | Select-Object -First 1 | |
| if (-not $installer) { | |
| Write-Error "NSIS installer not found under src-tauri/target/release/bundle/nsis" | |
| } | |
| gh release view $tag --repo $env:GH_REPO *> $null | |
| if ($LASTEXITCODE -ne 0) { | |
| Write-Host "Creating GitHub release for tag $tag" | |
| gh release create $tag --repo $env:GH_REPO --title $tag --generate-notes | |
| if ($LASTEXITCODE -ne 0) { | |
| Write-Error "Failed to create GitHub release for tag $tag" | |
| } | |
| } | |
| Write-Host "Uploading release assets to $tag" | |
| gh release upload $tag $installer.FullName "latest.json" --clobber --repo $env:GH_REPO | |
| if ($LASTEXITCODE -ne 0) { | |
| Write-Error "Failed to upload release assets to tag $tag" | |
| } | |
| - name: Upload installer to R2 storage | |
| # tag push 时上传到 R2 | |
| if: github.event_name == 'push' | |
| shell: powershell | |
| run: | | |
| $ErrorActionPreference = "Stop" | |
| $TAG = "${{ env.RELEASE_TAG }}" | |
| # 去掉前缀 v，得到纯版本号，如 0.1.0 | |
| $VERSION = $TAG.TrimStart('v') | |
| # 找到 NSIS 安装包 | |
| $installer = Get-ChildItem "src-tauri/target/release/bundle/nsis" -Filter *.exe | Select-Object -First 1 | |
| if (-not $installer) { | |
| Write-Error "NSIS installer not found under src-tauri/target/release/bundle/nsis" | |
| } | |
| # 使用 AWS CLI 上传到 R2（唯一方式） | |
| if (-not (Get-Command aws -ErrorAction SilentlyContinue)) { | |
| Write-Error "aws CLI not found. Please install AWS CLI v2 and ensure 'aws' is in PATH." | |
| } | |
| $accountId = "${{ env.R2_ACCOUNT_ID }}" | |
| $bucket = "${{ env.R2_BUCKET }}" | |
| $endpoint = "https://${accountId}.r2.cloudflarestorage.com" | |
| $dest = "s3://${bucket}/${VERSION}/simprint_setup.exe" | |
| $env:AWS_ACCESS_KEY_ID = "${{ env.R2_ACCESS_KEY_ID }}" | |
| $env:AWS_SECRET_ACCESS_KEY = "${{ env.R2_SECRET_ACCESS_KEY }}" | |
| $env:AWS_EC2_METADATA_DISABLED = "true" | |
| Write-Host "Uploading $($installer.FullName) to R2: $dest" | |
| aws s3 cp $installer.FullName $dest --endpoint-url $endpoint --region auto | |
| - name: Upload latest.json to R2 root | |
| # tag push 时上传到 R2 | |
| if: github.event_name == 'push' | |
| shell: powershell | |
| run: | | |
| $ErrorActionPreference = "Stop" | |
| if (-not (Get-Command aws -ErrorAction SilentlyContinue)) { | |
| Write-Error "aws CLI not found. Please install AWS CLI v2 and ensure 'aws' is in PATH." | |
| } | |
| $accountId = "${{ env.R2_ACCOUNT_ID }}" | |
| $bucket = "${{ env.R2_BUCKET }}" | |
| $endpoint = "https://${accountId}.r2.cloudflarestorage.com" | |
| $dest = "s3://${bucket}/latest.json" | |
| $env:AWS_ACCESS_KEY_ID = "${{ env.R2_ACCESS_KEY_ID }}" | |
| $env:AWS_SECRET_ACCESS_KEY = "${{ env.R2_SECRET_ACCESS_KEY }}" | |
| $env:AWS_EC2_METADATA_DISABLED = "true" | |
| Write-Host "Uploading latest.json to R2 root: $dest" | |
| aws s3 cp "latest.json" $dest --endpoint-url $endpoint --region auto | |
| - name: Upload latest.json artifact (manual runs) | |
| if: github.event_name == 'workflow_dispatch' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: latest-json | |
| path: latest.json | |
| - name: Publish version metadata | |
| if: github.event_name == 'push' | |
| env: | |
| VERSION_API_URL: ${{ secrets.VERSION_API_URL }} | |
| VERSION_API_KEY: ${{ secrets.VERSION_API_KEY }} | |
| RELEASE_TAG: ${{ env.RELEASE_TAG }} | |
| run: node deploy/publish-version.mjs |