diff --git a/.github/workflows/flow-deploy-release-artifact.yaml b/.github/workflows/flow-deploy-release-artifact.yaml new file mode 100644 index 00000000..d25c9e62 --- /dev/null +++ b/.github/workflows/flow-deploy-release-artifact.yaml @@ -0,0 +1,160 @@ +## +# Copyright (C) 2023-2024 Hedera Hashgraph, LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +## + +name: 'Deploy Release Artifact' +on: + workflow_dispatch: + inputs: + dry-run-enabled: + description: 'Perform Dry Run' + type: boolean + required: false + default: false + +defaults: + run: + shell: bash + +permissions: + contents: read + +jobs: + prepare-release: + name: Release / Prepare + runs-on: [self-hosted, Linux, medium, ephemeral] + outputs: + version: ${{ steps.tag.outputs.version }} + steps: + - name: Checkout Code + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + with: + fetch-depth: 0 + + - name: Setup Node + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 + with: + node-version: 20 + + - name: Install Semantic Release + run: | + npm install -g semantic-release@21.0.7 @semantic-release/git@10.0.1 @semantic-release/exec@6.0.3 gradle-semantic-release-plugin@1.7.6 + npm install -g conventional-changelog-conventionalcommits@6.1.0 @commitlint/cli@17.6.6 @commitlint/config-conventional@17.6.6 + npm install -g marked-mangle@1.0.1 marked-gfm-heading-id@3.0.4 semantic-release-conventional-commits@3.0.0 + + - name: Calculate Next Version + env: + NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GIT_AUTHOR_NAME: ${{ secrets.GIT_USER_NAME }} + GIT_AUTHOR_EMAIL: ${{ secrets.GIT_USER_EMAIL }} + GIT_COMMITTER_NAME: ${{ secrets.GIT_USER_NAME }} + GIT_COMMITTER_EMAIL: ${{ secrets.GIT_USER_EMAIL }} + run: npx semantic-release --dry-run + + - name: Extract Version + id: tag + run: | + [[ "${{ github.event.inputs.dry-run-enabled }}" == true && ! -f VERSION ]] && echo -n "0.0.0-latest" > VERSION + echo "version=$(cat VERSION | tr -d '[:space:]')" >> ${GITHUB_OUTPUT} + + create-github-release: + name: Github / Release + runs-on: [self-hosted, Linux, medium, ephemeral] + needs: + - prepare-release + steps: + - name: Checkout Code + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + with: + token: ${{ secrets.GH_ACCESS_TOKEN }} + fetch-depth: 0 + + - name: Install GnuPG Tools + run: | + if ! command -v gpg2 >/dev/null 2>&1; then + echo "::group::Updating APT Repository Indices" + sudo apt update + echo "::endgroup::" + echo "::group::Installing GnuPG Tools" + sudo apt install -y gnupg2 + echo "::endgroup::" + fi + + - name: Import GPG key + id: gpg_key + uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0 + with: + gpg_private_key: ${{ secrets.GPG_KEY_CONTENTS }} + passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} + git_config_global: true + git_user_signingkey: true + git_commit_gpgsign: true + git_tag_gpgsign: false + + - name: Setup Node + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 + with: + node-version: 20 + + - name: Setup JFrog CLI + uses: jfrog/setup-jfrog-cli@26da2259ee7690e63b5410d7451b2938d08ce1f9 # v4.0.0 + env: + JF_URL: ${{ vars.JF_URL }} + JF_ACCESS_TOKEN: ${{ secrets.JF_ACCESS_TOKEN }} + + - name: Show JFrog Config + run: jfrog config show + + - name: Verify JFrog Connectivity + run: jfrog rt ping + + - name: Setup JFrog NPM Repository + run: | + jf npmc --server-id-resolve setup-jfrog-cli-server --server-id-deploy setup-jfrog-cli-server --repo-resolve hedera-cli-npm-release --repo-deploy hedera-cli-npm-release + echo "::group::JFrog NPM Repository Configuration" + cat .jfrog/projects/npm.yaml + echo "::endgroup::" + + - name: Install Semantic Release + run: | + npm install -g semantic-release@21.0.7 @semantic-release/git@10.0.1 @semantic-release/exec@6.0.3 gradle-semantic-release-plugin@1.7.6 + npm install -g conventional-changelog-conventionalcommits@6.1.0 @commitlint/cli@17.6.6 @commitlint/config-conventional@17.6.6 + npm install -g marked-mangle@1.0.1 marked-gfm-heading-id@3.0.4 semantic-release-conventional-commits@3.0.0 + + - name: Install Dependencies + run: jf npm ci + + - name: Setup NPM Authentication + run: | + # create .npmrc file to publish Hedera CLI to the npmjs.org registry + rm -f .npmrc || true + echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > ".npmrc" + echo '@hashgraph:registry=https://registry.npmjs.org/' >> ".npmrc" + + - name: Publish Semantic Release + env: + NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GH_ACCESS_TOKEN }} + GIT_AUTHOR_NAME: ${{ secrets.GIT_USER_NAME }} + GIT_AUTHOR_EMAIL: ${{ secrets.GIT_USER_EMAIL }} + GIT_COMMITTER_NAME: ${{ secrets.GIT_USER_NAME }} + GIT_COMMITTER_EMAIL: ${{ secrets.GIT_USER_EMAIL }} + if: ${{ github.event.inputs.dry-run-enabled != 'true' && !cancelled() && !failure() }} + run: npx semantic-release + + - name: Deploy to JFrog Registry + if: ${{ github.event.inputs.dry-run-enabled != 'true' && !cancelled() && !failure() }} + run: jf npm publish diff --git a/.releaserc b/.releaserc new file mode 100644 index 00000000..13a08401 --- /dev/null +++ b/.releaserc @@ -0,0 +1,62 @@ +{ + "plugins": [ + "@semantic-release/commit-analyzer", + [ + "@semantic-release/release-notes-generator", + { + "preset": "conventionalcommits" + } + ], + "@semantic-release/npm", + "@semantic-release/git", + "@semantic-release/github" + ], + "verifyRelease": [ + [ + "@semantic-release/exec", + { "cmd": "echo ${nextRelease.version} > VERSION" } + ] + ], + "prepare": [ + "@semantic-release/npm", + [ + "@semantic-release/git", + { + "assets": [ + "package.json", + "package-lock.json" + ] + } + ] + ], + "branches":[ + { + "name": "main" + }, + { + "name": "release/([0-9]+).([0-9]+)", + "channel": "${name.replace(/release\\//g, '').split('.')[0]}.${name.replace(/release\\//g, '').split('.')[1]}.x", + "range": "${name.replace(/release\\//g, '').split('.')[0]}.${name.replace(/release\\//g, '').split('.')[1]}.x" + }, + { + "name": "alpha/*", + "prerelease": "alpha", + "channel": "alpha" + }, + { + "name": "ci/*", + "prerelease": "alpha", + "channel": "alpha" + }, + { + "name": "beta/*", + "prerelease": "beta", + "channel": "beta" + }, + { + "name": "rc/*", + "prerelease": "rc", + "channel": "rc" + } + ] +}