8a91dba6e3
* Done! Here's a summary of the changes: 1. **`scripts/prepare-db.js`** - Added `--check` flag support that runs `cargo sqlx prepare --check` instead of `cargo sqlx prepare` 2. **`package.json`** - Added new script: ```json "prepare-db:check": "node scripts/prepare-db.js --check" ``` 3. **`.github/workflows/test.yml`** - Added `npm run prepare-db:check` to the Checks step The check will verify that the `.sqlx/` cached query metadata is up-to-date with the actual SQL queries in the codebase. If a developer modifies a SQL query but forgets to run `npm run prepare-db`, the CI will fail. * Fix image queries * Done! Added check mode support to the remote script: 1. **`crates/remote/scripts/prepare-db.sh`** - Added `--check` flag support that runs `cargo sqlx prepare --check` when passed 2. **`package.json`** - Added: ```json "remote:prepare-db:check": "cd crates/remote && bash scripts/prepare-db.sh --check" ``` Note: I didn't add `remote:prepare-db:check` to CI since it requires PostgreSQL (`initdb`, `pg_ctl`) which may not be available on the CI runner. The local SQLite-based `prepare-db:check` is already in CI. Let me know if you'd like to add the remote check to CI as well (would require installing PostgreSQL in the workflow). * Add remote db check to workflow * Added a step to install `sqlx-cli` with both SQLite and PostgreSQL features. The Rust cache should help speed up subsequent runs since it caches installed crates. * Done! All three files updated to use Rust `1.89.0`: 1. `rust-toolchain.toml` - `channel = "1.89.0"` 2. `.github/workflows/test.yml` - `toolchain: 1.89.0` 3. `.github/workflows/pre-release.yml` - `RUST_TOOLCHAIN: 1.89.0` This should fix the `zerocopy` AVX512 compile error since 1.89.0 has `stdarch_x86_avx512` stabilized. * Done. Added a step to install PostgreSQL before the Checks step so `npm run remote:prepare-db:check` can run. * Updated to install `postgresql-16` and add `/usr/lib/postgresql/16/bin` to PATH so `initdb`, `pg_ctl`, and `createdb` are available. * Added the official PostgreSQL apt repository so we can install PostgreSQL 16. * Much cleaner. Using the `ikalnytskyi/action-setup-postgres@v7` action which handles the PostgreSQL 16 installation and PATH setup automatically. * Done. Changes made: 1. **`crates/remote/scripts/prepare-db.sh`**: Now checks if `DATABASE_URL` is set. If so, uses the existing PostgreSQL server. Otherwise creates a temp cluster as before. 2. **`.github/workflows/test.yml`**: - Added `database: remote` to the PostgreSQL action to create the database - Added `DATABASE_URL: postgres://postgres@localhost:5432/remote` env var to the Checks step * Done. Changes made: 1. **`.github/workflows/test.yml`**: Removed PostgreSQL setup step and `DATABASE_URL` env var 2. **`crates/remote/scripts/prepare-db.sh`**: Simplified - for `--check` mode, exits early with `SQLX_OFFLINE=true cargo sqlx prepare --check` (no database needed)
492 lines
17 KiB
YAML
492 lines
17 KiB
YAML
name: Create GitHub Pre-Release
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
version_type:
|
|
description: "Version bump type"
|
|
required: true
|
|
default: "patch"
|
|
type: choice
|
|
options:
|
|
- patch
|
|
- minor
|
|
- major
|
|
- prerelease
|
|
|
|
concurrency:
|
|
group: release-${{ github.ref_name }} # allow concurrent prerelease from different branches
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: write
|
|
packages: write
|
|
pull-requests: write
|
|
|
|
env:
|
|
NODE_VERSION: 22
|
|
PNPM_VERSION: 10.13.1
|
|
RUST_TOOLCHAIN: 1.89.0
|
|
|
|
jobs:
|
|
bump-version:
|
|
runs-on: ubuntu-latest
|
|
outputs:
|
|
new_tag: ${{ steps.version.outputs.new_tag }}
|
|
new_version: ${{ steps.version.outputs.new_version }}
|
|
branch_suffix: ${{ steps.branch.outputs.suffix }}
|
|
steps:
|
|
- name: Cache cargo-edit
|
|
uses: actions/cache@v3
|
|
id: cache-cargo-edit
|
|
with:
|
|
path: ~/.cargo/bin/cargo-set-version
|
|
key: cargo-edit-${{ runner.os }}-${{ env.RUST_TOOLCHAIN }}
|
|
|
|
- name: Install cargo-edit
|
|
if: steps.cache-cargo-edit.outputs.cache-hit != 'true'
|
|
run: cargo install cargo-edit
|
|
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
ssh-key: ${{ secrets.DEPLOY_KEY }}
|
|
|
|
- name: setup node
|
|
uses: ./.github/actions/setup-node
|
|
|
|
- name: Generate branch suffix
|
|
id: branch
|
|
run: |
|
|
branch_name="${{ github.ref_name }}"
|
|
# Get last 6 characters of branch name, remove all special chars (including dashes)
|
|
suffix=$(echo "$branch_name" | tail -c 7 | sed 's/[^a-zA-Z0-9]//g' | tr '[:upper:]' '[:lower:]')
|
|
echo "Branch: $branch_name"
|
|
echo "Suffix: $suffix"
|
|
echo "suffix=$suffix" >> $GITHUB_OUTPUT
|
|
|
|
- name: Determine and update versions
|
|
id: version
|
|
run: |
|
|
# Get the latest version from npm registry
|
|
latest_npm_version=$(npm view vibe-kanban version 2>/dev/null || echo "0.0.0")
|
|
echo "Latest npm version: $latest_npm_version"
|
|
|
|
timestamp=$(date +%Y%m%d%H%M%S)
|
|
|
|
# Update root package.json based on npm version, not current package.json
|
|
if [[ "${{ github.event.inputs.version_type }}" == "prerelease" ]]; then
|
|
# For prerelease, use current package.json version and add branch suffix
|
|
npm version prerelease --preid="${{ steps.branch.outputs.suffix }}" --no-git-tag-version
|
|
|
|
new_version=$(node -p "require('./package.json').version")
|
|
new_tag="v${new_version}.${timestamp}"
|
|
else
|
|
# For regular releases, use npm version and bump it
|
|
npm version $latest_npm_version --no-git-tag-version --allow-same-version
|
|
npm version ${{ github.event.inputs.version_type }} --no-git-tag-version
|
|
|
|
new_version=$(node -p "require('./package.json').version")
|
|
new_tag="v${new_version}-${timestamp}"
|
|
fi
|
|
|
|
# Update npx-cli package.json to match
|
|
cd npx-cli
|
|
npm version $new_version --no-git-tag-version --allow-same-version
|
|
cd ..
|
|
|
|
# Update frontend package.json to match
|
|
cd frontend
|
|
npm version $new_version --no-git-tag-version --allow-same-version
|
|
cd ..
|
|
|
|
cargo set-version --workspace "$new_version"
|
|
|
|
echo "New version: $new_version"
|
|
echo "new_version=$new_version" >> $GITHUB_OUTPUT
|
|
echo "new_tag=$new_tag" >> $GITHUB_OUTPUT
|
|
|
|
- name: Commit changes and create tag
|
|
run: |
|
|
git config --local user.email "action@github.com"
|
|
git config --local user.name "GitHub Action"
|
|
git add package.json pnpm-lock.yaml npx-cli/package.json frontend/package.json Cargo.lock
|
|
git add $(find . -name Cargo.toml)
|
|
git commit -m "chore: bump version to ${{ steps.version.outputs.new_version }}"
|
|
git tag -a ${{ steps.version.outputs.new_tag }} -m "Release ${{ steps.version.outputs.new_tag }}"
|
|
git push
|
|
git push --tags
|
|
|
|
build-frontend:
|
|
needs: bump-version
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
VITE_PUBLIC_REACT_VIRTUOSO_LICENSE_KEY: ${{ secrets.PUBLIC_REACT_VIRTUOSO_LICENSE_KEY }}
|
|
VITE_VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ needs.bump-version.outputs.new_tag }}
|
|
|
|
- name: Setup Node
|
|
uses: ./.github/actions/setup-node
|
|
|
|
- name: Install dependencies
|
|
run: pnpm install
|
|
|
|
- name: Lint frontend
|
|
run: cd frontend && npm run lint
|
|
|
|
- name: Type check frontend
|
|
run: cd frontend && npx tsc --noEmit
|
|
|
|
- name: Build frontend
|
|
run: cd frontend && npm run build
|
|
env:
|
|
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
VITE_POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}
|
|
VITE_POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}
|
|
|
|
- name: Create Sentry release
|
|
uses: getsentry/action-release@v3
|
|
env:
|
|
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
|
|
SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
|
|
with:
|
|
release: ${{ needs.bump-version.outputs.new_version }}
|
|
environment: production
|
|
sourcemaps: "./frontend/dist"
|
|
ignore_missing: true
|
|
|
|
- name: Upload frontend artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: frontend-dist
|
|
path: frontend/dist/
|
|
retention-days: 1
|
|
|
|
build-backend:
|
|
needs: [bump-version, build-frontend]
|
|
runs-on: ${{ matrix.os }}
|
|
container: ${{ matrix.container }}
|
|
strategy:
|
|
# Platform matrix - keep target/name in sync with package-npx-cli job
|
|
matrix:
|
|
include:
|
|
- target: x86_64-unknown-linux-musl
|
|
os: ubuntu-latest
|
|
container: &zigbuild_container ghcr.io/rust-cross/cargo-zigbuild@sha256:af1bc2b869c5d76c1300f7a4685c2f1793d068e6e895c9f5c399b517b31a731e
|
|
name: linux-x64
|
|
- target: aarch64-unknown-linux-musl
|
|
os: ubuntu-latest
|
|
name: linux-arm64
|
|
container: *zigbuild_container
|
|
- target: x86_64-pc-windows-msvc
|
|
os: windows-latest-l
|
|
name: windows-x64
|
|
# Intel-only runner; last supported x86_64 image (EOL Aug 2027)
|
|
- target: x86_64-apple-darwin
|
|
os: macos-15-intel
|
|
name: macos-x64
|
|
- target: aarch64-apple-darwin
|
|
os: macos-14
|
|
name: macos-arm64
|
|
- target: aarch64-pc-windows-msvc
|
|
os: windows-latest-l
|
|
name: windows-arm64
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ needs.bump-version.outputs.new_tag }}
|
|
|
|
- name: Install Rust toolchain
|
|
uses: dtolnay/rust-toolchain@stable
|
|
with:
|
|
toolchain: ${{ env.RUST_TOOLCHAIN }}
|
|
targets: ${{ matrix.target }}
|
|
components: rustfmt, clippy
|
|
|
|
- name: Install libclang (Linux)
|
|
if: runner.os == 'Linux'
|
|
run: |
|
|
apt-get update
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y clang libclang-dev
|
|
|
|
- name: Cache Rust dependencies
|
|
uses: Swatinem/rust-cache@v2
|
|
with:
|
|
workspaces: "."
|
|
prefix-key: "cache-v1.0"
|
|
key: ${{ matrix.target }}_${{ matrix.os }}
|
|
cache-on-failure: true
|
|
shared-key: "shared"
|
|
cache-all-crates: true
|
|
|
|
- name: Download frontend artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: frontend-dist
|
|
path: frontend/dist/
|
|
|
|
- name: Build backend (Linux)
|
|
if: runner.os == 'Linux'
|
|
run: |
|
|
cargo zigbuild --release --target ${{ matrix.target }} -p server
|
|
cargo zigbuild --release --target ${{ matrix.target }} --bin mcp_task_server
|
|
env:
|
|
POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}
|
|
POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}
|
|
VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}
|
|
|
|
- name: Build backend (non-Linux)
|
|
if: runner.os != 'Linux'
|
|
run: |
|
|
cargo build --release --target ${{ matrix.target }} -p server
|
|
cargo build --release --target ${{ matrix.target }} --bin mcp_task_server
|
|
env:
|
|
POSTHOG_API_KEY: ${{ secrets.POSTHOG_API_KEY }}
|
|
POSTHOG_API_ENDPOINT: ${{ secrets.POSTHOG_API_ENDPOINT }}
|
|
VK_SHARED_API_BASE: ${{ secrets.VK_SHARED_API_BASE }}
|
|
|
|
- name: Setup Sentry CLI
|
|
uses: matbour/setup-sentry-cli@v2
|
|
with:
|
|
token: ${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
organization: ${{ secrets.SENTRY_ORG }}
|
|
project: ${{ secrets.SENTRY_PROJECT }}
|
|
version: 2.21.2
|
|
|
|
- name: Upload source maps to Sentry
|
|
run: sentry-cli debug-files upload --include-sources target/${{ matrix.target }}/release
|
|
|
|
- name: Prepare binaries (non-macOS)
|
|
if: runner.os != 'macOS'
|
|
shell: bash
|
|
run: |
|
|
mkdir -p dist
|
|
if [[ "${{ matrix.os }}" == "windows-latest-l" ]]; then
|
|
cp target/${{ matrix.target }}/release/server.exe dist/vibe-kanban-${{ matrix.name }}.exe
|
|
cp target/${{ matrix.target }}/release/mcp_task_server.exe dist/vibe-kanban-mcp-${{ matrix.name }}.exe
|
|
else
|
|
cp target/${{ matrix.target }}/release/server dist/vibe-kanban-${{ matrix.name }}
|
|
cp target/${{ matrix.target }}/release/mcp_task_server dist/vibe-kanban-mcp-${{ matrix.name }}
|
|
fi
|
|
|
|
# Code signing for macOS only
|
|
- name: Prepare Apple certificate (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: |
|
|
echo "${{ secrets.APPLE_CERTIFICATE_P12_BASE64 }}" | base64 --decode > certificate.p12
|
|
|
|
- name: Write API Key to file
|
|
if: runner.os == 'macOS'
|
|
env:
|
|
API_KEY: ${{ secrets.APP_STORE_API_KEY }}
|
|
run: echo $API_KEY > app_store_key.json
|
|
|
|
- name: Sign main binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
uses: indygreg/apple-code-sign-action@v1
|
|
with:
|
|
input_path: target/${{ matrix.target }}/release/server
|
|
output_path: vibe-kanban
|
|
p12_file: certificate.p12
|
|
p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
sign: true
|
|
sign_args: "--code-signature-flags=runtime"
|
|
|
|
- name: Package main binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: zip vibe-kanban.zip vibe-kanban
|
|
|
|
- name: Notarize signed binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
uses: indygreg/apple-code-sign-action@v1
|
|
continue-on-error: true
|
|
with:
|
|
input_path: vibe-kanban.zip
|
|
sign: false
|
|
notarize: true
|
|
app_store_connect_api_key_json_file: app_store_key.json
|
|
|
|
- name: Sign MCP binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
uses: indygreg/apple-code-sign-action@v1
|
|
with:
|
|
input_path: target/${{ matrix.target }}/release/mcp_task_server
|
|
output_path: vibe-kanban-mcp
|
|
p12_file: certificate.p12
|
|
p12_password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
|
|
sign: true
|
|
sign_args: "--code-signature-flags=runtime"
|
|
|
|
- name: Package MCP binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: zip vibe-kanban-mcp.zip vibe-kanban-mcp
|
|
|
|
- name: Notarize signed MCP binary (macOS)
|
|
if: runner.os == 'macOS'
|
|
uses: indygreg/apple-code-sign-action@v1
|
|
continue-on-error: true
|
|
with:
|
|
input_path: vibe-kanban-mcp.zip
|
|
sign: false
|
|
notarize: true
|
|
app_store_connect_api_key_json_file: app_store_key.json
|
|
|
|
- name: Prepare signed binaries (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: |
|
|
mkdir -p dist
|
|
cp vibe-kanban.zip dist/vibe-kanban-${{ matrix.name }}.zip
|
|
cp vibe-kanban-mcp.zip dist/vibe-kanban-mcp-${{ matrix.name }}.zip
|
|
|
|
- name: Clean up certificates (macOS)
|
|
if: runner.os == 'macOS'
|
|
run: |
|
|
rm -f certificate.p12
|
|
rm -rf private_keys/
|
|
|
|
- name: Upload binary artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: backend-binary-${{ matrix.name }}
|
|
path: dist/
|
|
retention-days: 1
|
|
|
|
package-npx-cli:
|
|
needs: [bump-version, build-frontend, build-backend]
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
# NOTE: This matrix must be kept in sync with build-backend job above
|
|
# GitHub Actions doesn't support YAML anchors, so duplication is unavoidable
|
|
matrix:
|
|
include:
|
|
- target: x86_64-unknown-linux-musl
|
|
name: linux-x64
|
|
binary: vibe-kanban
|
|
mcp_binary: vibe-kanban-mcp
|
|
- target: x86_64-pc-windows-msvc
|
|
name: windows-x64
|
|
binary: vibe-kanban.exe
|
|
mcp_binary: vibe-kanban-mcp.exe
|
|
- target: x86_64-apple-darwin
|
|
name: macos-x64
|
|
binary: vibe-kanban
|
|
mcp_binary: vibe-kanban-mcp
|
|
- target: aarch64-apple-darwin
|
|
name: macos-arm64
|
|
binary: vibe-kanban
|
|
mcp_binary: vibe-kanban-mcp
|
|
- target: aarch64-pc-windows-msvc
|
|
name: windows-arm64
|
|
binary: vibe-kanban.exe
|
|
mcp_binary: vibe-kanban-mcp.exe
|
|
- target: aarch64-unknown-linux-musl
|
|
name: linux-arm64
|
|
binary: vibe-kanban
|
|
mcp_binary: vibe-kanban-mcp
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ needs.bump-version.outputs.new_tag }}
|
|
|
|
- name: Download frontend artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: frontend-dist
|
|
path: frontend/dist/
|
|
|
|
- name: Download backend binary artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: backend-binary-${{ matrix.name }}
|
|
path: dist/
|
|
|
|
- name: List downloaded artifacts
|
|
run: |
|
|
echo "Downloaded backend binaries:"
|
|
find dist/
|
|
|
|
- name: Create platform package
|
|
if: matrix.name != 'macos-arm64' && matrix.name != 'macos-x64'
|
|
run: |
|
|
mkdir -p npx-cli/dist/${{ matrix.name }}
|
|
mkdir vibe-kanban-${{ matrix.name }}
|
|
mkdir vibe-kanban-mcp-${{ matrix.name }}
|
|
|
|
cp dist/vibe-kanban-${{ matrix.name }}* vibe-kanban-${{ matrix.name }}/${{ matrix.binary }}
|
|
cp dist/vibe-kanban-mcp-${{ matrix.name }}* vibe-kanban-mcp-${{ matrix.name }}/${{ matrix.mcp_binary }}
|
|
|
|
zip -j npx-cli/dist/${{ matrix.name }}/vibe-kanban.zip vibe-kanban-${{ matrix.name }}/${{ matrix.binary }}
|
|
zip -j npx-cli/dist/${{ matrix.name }}/vibe-kanban-mcp.zip vibe-kanban-mcp-${{ matrix.name }}/${{ matrix.mcp_binary }}
|
|
|
|
- name: Create platform package (macOS)
|
|
if: matrix.name == 'macos-arm64' || matrix.name == 'macos-x64'
|
|
run: |
|
|
mkdir -p npx-cli/dist/${{ matrix.name }}
|
|
mkdir vibe-kanban-${{ matrix.name }}
|
|
cp dist/vibe-kanban-${{ matrix.name }}* npx-cli/dist/${{ matrix.name }}/vibe-kanban.zip
|
|
cp dist/vibe-kanban-mcp-${{ matrix.name }}* npx-cli/dist/${{ matrix.name }}/vibe-kanban-mcp.zip
|
|
|
|
- name: Upload platform package artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: npx-platform-${{ matrix.name }}
|
|
path: npx-cli/dist/
|
|
retention-days: 1
|
|
|
|
create-prerelease:
|
|
needs: [bump-version, build-frontend, build-backend, package-npx-cli]
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ needs.bump-version.outputs.new_tag }}
|
|
|
|
- name: Download frontend artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: frontend-dist
|
|
path: frontend/dist/
|
|
|
|
- name: Download backend npx-cli zips
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
pattern: npx-platform-*
|
|
path: npx-cli/dist/
|
|
merge-multiple: true
|
|
|
|
- name: List downloaded artifacts
|
|
run: |
|
|
echo "Backend dist:"
|
|
find npx-cli/dist
|
|
echo "Frontend dist:"
|
|
find frontend/dist
|
|
|
|
- name: Zip frontend
|
|
run: |
|
|
mkdir vibe-kanban-${{ needs.bump-version.outputs.new_tag }}
|
|
mv frontend/dist vibe-kanban-${{ needs.bump-version.outputs.new_tag }}
|
|
zip -r vibe-kanban-${{ needs.bump-version.outputs.new_tag }}.zip vibe-kanban-${{ needs.bump-version.outputs.new_tag }}
|
|
|
|
- name: Setup Node for npm pack
|
|
uses: ./.github/actions/setup-node
|
|
|
|
- name: Pack
|
|
run: |
|
|
cd npx-cli
|
|
npm pack
|
|
|
|
- name: Create GitHub Pre-Release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
tag_name: ${{ needs.bump-version.outputs.new_tag }}
|
|
name: Pre-release ${{ needs.bump-version.outputs.new_tag }}
|
|
prerelease: true
|
|
generate_release_notes: true
|
|
files: |
|
|
vibe-kanban-${{ needs.bump-version.outputs.new_tag }}.zip
|
|
npx-cli/vibe-kanban-*.tgz
|