release_build_extended_services.yml

#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
#

name: "Release :: Build (Extended Services)"

on:
  workflow_call:
    inputs:
      dry_run:
        type: boolean
        required: true
      base_ref:
        type: string
        required: true
      tag:
        type: string
        required: false
        default: "0.0.0"
      upload_asset_url:
        type: string
        required: false
        default: ""
      release_candidate:
        type: boolean
        required: false
        default: false
      release_candidate_version:
        type: string
        required: false
        default: ""
    secrets:
      gh_token:
        required: false

env:
  KIE_TOOLS_BUILD__runLinters: "false"
  KIE_TOOLS_BUILD__runTests: "false"
  KIE_TOOLS_BUILD__runEndToEndTests: "false"
  KIE_TOOLS_BUILD__buildContainerImages: "true"

jobs:
  extended_services:
    env:
      EXTENDED_SERVICES__kieSandboxUrl: "https://apache.github.io/incubator-kie-kogito-online"

    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [macos-13, windows-latest]
    steps:
      - name: "Support longpaths (Windows only)"
        if: runner.os == 'Windows'
        run: git config --system core.longpaths true

      - name: "Checkout @ GitHub default"
        uses: actions/checkout@v3

      - name: "Checkout @ Simulated squashed-merge if PR"
        uses: ./.github/actions/checkout-pr
        with:
          ref: ${{ inputs.base_ref }}

      - name: "Setup environment"
        id: setup_env
        uses: ./.github/actions/setup-env

      - name: "Bootstrap"
        id: bootstrap
        uses: ./.github/actions/bootstrap
        with:
          pnpm_filter_string: -F @kie-tools/extended-services...

      - name: "Build"
        shell: bash
        run: |
          pnpm ${{ steps.bootstrap.outputs.pnpm_filter_string }} build:prod

      - name: "Upload Extended Services for macOS"
        if: ${{ runner.os == 'macOS' && !inputs.dry_run && !inputs.release_candidate }}
        uses: actions/upload-release-asset@v1.0.2
        env:
          GITHUB_TOKEN: ${{ secrets.gh_token }}
        with:
          upload_url: ${{ inputs.upload_asset_url }}
          asset_path: ./packages/extended-services/dist/darwin/Kogito.dmg
          asset_name: kie_sandbox_extended_services_macos_${{ inputs.tag }}.dmg
          asset_content_type: application/octet-stream

      - name: "Upload Extended Services for Windows"
        if: ${{ runner.os == 'Windows' && !inputs.dry_run && !inputs.release_candidate }}
        uses: actions/upload-release-asset@v1.0.2
        env:
          GITHUB_TOKEN: ${{ secrets.gh_token }}
        with:
          upload_url: ${{ inputs.upload_asset_url }}
          asset_path: "./packages/extended-services/dist/win32/kie_sandbox_extended_services.exe"
          asset_name: "kie_sandbox_extended_services_windows_${{ inputs.tag }}.exe"
          asset_content_type: application/octet-stream

      - name: "Setup Extended Services for macOS artifacts"
        id: macos_setup_artifact
        if: ${{ runner.os == 'macOS' && !inputs.dry_run && inputs.release_candidate }}
        shell: bash
        env:
          PROJECT_VERSION: ${{ inputs.release_candidate_version }}
        run: |
          ARTIFACT_ZIP_FILE="./extended-services-release-artifacts/incubator-kie-$PROJECT_VERSION-sandbox-extended-services-macOS.zip"
          echo "ARTIFACT_ZIP_FILE=$ARTIFACT_ZIP_FILE" >> "$GITHUB_OUTPUT"
          mkdir ./extended-services-release-artifacts
          zip $ARTIFACT_ZIP_FILE ./packages/extended-services/dist/darwin/Kogito.dmg

      - name: "Sign Extended Services for macOS artifact"
        if: ${{ runner.os == 'macOS' && !inputs.dry_run && inputs.release_candidate }}
        shell: bash
        env:
          GPG_KEY: ${{ secrets.GPG_KEY }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
          ARTIFACT_ZIP_FILE: ${{ steps.macos_setup_artifact.outputs.ARTIFACT_ZIP_FILE }}
        run: |
          echo $GPG_KEY > ./signkey.gpg
          gpg --list-keys
          gpg --batch --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" --import ./signkey.gpg
          rm ./signkey.gpg
          echo $GPG_PASSPHRASE | gpg --no-tty --batch --sign --pinentry-mode loopback --passphrase-fd 0 --output $ARTIFACT_ZIP_FILE.asc --detach-sig $ARTIFACT_ZIP_FILE
          shasum -a 512 $ARTIFACT_ZIP_FILE > $ARTIFACT_ZIP_FILE.sha512

      - name: "Upload Extended Services for macOS artifact"
        if: ${{ runner.os == 'macOS' && !inputs.dry_run && inputs.release_candidate }}
        shell: bash
        env:
          SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
          SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
          PROJECT_VERSION: ${{ inputs.release_candidate_version }}
          ARTIFACT_ZIP_FILE: ${{ steps.macos_setup_artifact.outputs.ARTIFACT_ZIP_FILE }}
        run: |
          svn co --depth=empty https://dist.apache.org/repos/dist/dev/incubator/kie svn-kie
          cp ./extended-services-release-artifacts/* svn-kie/$PROJECT_VERSION/
          svn add "svn-kie/$PROJECT_VERSION"
          cd svn-kie
          svn ci --non-interactive --no-auth-cache --username "$SVN_USERNAME" --password "$SVN_PASSWORD" -m "Apache KIE $PROJECT_VERSION Extended Services for macOS artifact"
          rm -rf svn-kie

      - name: "Setup Extended Services for Windows artifacts"
        id: windows_setup_artifact
        if: ${{ runner.os == 'macOS' && !inputs.dry_run && inputs.release_candidate }}
        shell: pwsh
        env:
          PROJECT_VERSION: ${{ inputs.release_candidate_version }}
        run: |
          ARTIFACT_ZIP_FILE="./extended-services-release-artifacts/incubator-kie-$PROJECT_VERSION-sandbox-extended-services-macOS.zip"
          echo "ARTIFACT_ZIP_FILE=$ARTIFACT_ZIP_FILE" >> "$GITHUB_OUTPUT"
          mkdir ./extended-services-release-artifacts
          zip $ARTIFACT_ZIP_FILE ./packages/extended-services/dist/win32/kie_sandbox_extended_services.exe

      - name: "Sign Extended Services for Windows artifact"
        if: ${{ runner.os == 'Windows' && !inputs.dry_run && inputs.release_candidate }}
        shell: pwsh
        env:
          GPG_KEY: ${{ secrets.GPG_KEY }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
          ARTIFACT_ZIP_FILE: ${{ steps.windows_setup_artifact.outputs.ARTIFACT_ZIP_FILE }}
        run: |
          echo $GPG_KEY > ./signkey.gpg
          gpg --list-keys
          gpg --batch --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" --import ./signkey.gpg
          rm ./signkey.gpg
          echo $GPG_PASSPHRASE | gpg --no-tty --batch --sign --pinentry-mode loopback --passphrase-fd 0 --output $ARTIFACT_ZIP_FILE.asc --detach-sig $ARTIFACT_ZIP_FILE
          shasum -a 512 $ARTIFACT_ZIP_FILE > $ARTIFACT_ZIP_FILE.sha512

      - name: "Upload Extended Services for Windows artifact"
        if: ${{ runner.os == 'Windows' && !inputs.dry_run && inputs.release_candidate }}
        shell: pwsh
        env:
          SVN_USERNAME: ${{ secrets.SVN_USERNAME }}
          SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
          PROJECT_VERSION: ${{ inputs.release_candidate_version }}
          ARTIFACT_ZIP_FILE: ${{ steps.windows_setup_artifact.outputs.ARTIFACT_ZIP_FILE }}
        run: |
          svn co --depth=empty https://dist.apache.org/repos/dist/dev/incubator/kie svn-kie
          cp ./extended-services-release-artifacts/* svn-kie/$PROJECT_VERSION/
          svn add "svn-kie/$PROJECT_VERSION"
          cd svn-kie
          svn ci --non-interactive --no-auth-cache --username "$SVN_USERNAME" --password "$SVN_PASSWORD" -m "Apache KIE $PROJECT_VERSION Extended Services for Windows artifact"
          rm -rf svn-kie