kristianwindandClaude Opus 5
d9a925ea75
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
98 lines
3.5 KiB
YAML
98 lines
3.5 KiB
YAML
name: Release
|
|
|
|
# Builds the plugin zip, proves it installs and works, and publishes it here.
|
|
#
|
|
# This copy publishes to GitHub. The update feed shops read lives on Gitea, so
|
|
# the .gitea copy is the one that decides whether shops are offered the new
|
|
# version; this one keeps GitHub's releases in step. Deliberately not
|
|
# byte-identical, and ci/workflows-in-sync.sh knows that.
|
|
#
|
|
# Nothing is published before the tests have passed against the current
|
|
# WordPress and WooCommerce. A release that fails here is one that was never
|
|
# offered to anybody, which is the entire point of doing it in this order.
|
|
|
|
on:
|
|
push:
|
|
tags: ['v*']
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: 'Tag to publish, e.g. v1.4.0'
|
|
required: true
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
release:
|
|
# A release workflow publishes to whichever forge RUNS it. Gitea picks up
|
|
# .github/workflows only when .gitea/workflows does not exist — so without
|
|
# this gate, deleting that directory would quietly start publishing a
|
|
# second, differently-built release to Gitea on every tag, while GitHub
|
|
# looked fine.
|
|
if: github.server_url == 'https://github.com'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Which tag
|
|
id: tag
|
|
run: |
|
|
TAG="${{ github.event.inputs.tag || github.ref_name }}"
|
|
[ -n "$TAG" ] || { echo "Could not determine the tag."; exit 1; }
|
|
echo "tag=$TAG" >> "$GITHUB_OUTPUT"
|
|
echo "version=${TAG#v}" >> "$GITHUB_OUTPUT"
|
|
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ steps.tag.outputs.tag }}
|
|
# ci/publish-release.sh re-fetches the tag as a ref before reading
|
|
# its message, because checkout overwrites that ref with the commit
|
|
# SHA and turns the annotated tag into a lightweight one. It needs
|
|
# the history to do that.
|
|
fetch-depth: 0
|
|
|
|
- name: The tools this release needs are present
|
|
# Checked first, because everything below takes about ten minutes and
|
|
# discovering that the runner image has no python3 at the publishing
|
|
# step means doing all of it again.
|
|
run: |
|
|
missing=
|
|
for t in git curl python3 tar; do
|
|
command -v "$t" >/dev/null 2>&1 || missing="$missing $t"
|
|
done
|
|
if [ -n "$missing" ]; then
|
|
echo "::error::This runner is missing:$missing"
|
|
exit 1
|
|
fi
|
|
echo "git, curl, python3 and tar are all present."
|
|
|
|
- name: The header version is the tag
|
|
run: |
|
|
HEADER=$(ci/version.sh)
|
|
TAG_VERSION="${{ steps.tag.outputs.version }}"
|
|
echo "plugin header: $HEADER"
|
|
echo "tag: $TAG_VERSION"
|
|
if [ "$HEADER" != "$TAG_VERSION" ]; then
|
|
echo "::error::WordPress compares the update feed against the plugin header and nothing else."
|
|
echo "::error::With the header at $HEADER and the tag at $TAG_VERSION, every shop that installs this update is offered it again immediately, forever."
|
|
exit 1
|
|
fi
|
|
|
|
- name: Static checks
|
|
run: ci/static.sh
|
|
|
|
- name: It installs and works on the current WordPress and WooCommerce
|
|
env:
|
|
WP_VERSION: latest
|
|
WC_VERSION: latest
|
|
PHP_VERSION: '8.3'
|
|
run: ci/site-test.sh
|
|
|
|
- name: Build the zip
|
|
run: ci/build-zip.sh
|
|
|
|
- name: Publish, then read the feed back anonymously
|
|
env:
|
|
TAG: ${{ steps.tag.outputs.tag }}
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: ci/publish-release.sh
|