chore: remove jwt secret env variable #81
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build AppFlowy Application | |
| on: | |
| push: | |
| tags: | |
| - "*" | |
| env: | |
| FLUTTER_VERSION: "3.10.1" | |
| RUST_TOOLCHAIN: "1.70" | |
| jobs: | |
| create-release: | |
| runs-on: ubuntu-latest | |
| #https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idenvironment | |
| env: | |
| RELEASE_NOTES_PATH: /tmp/release_notes | |
| outputs: | |
| version: ${{ steps.parse_tag.outputs.version }} | |
| branch_name: ${{ steps.parse_tag.outputs.branch_name }} | |
| upload_url: ${{ steps.create_release.outputs.upload_url }} | |
| steps: | |
| - name: Parse Tag | |
| id: parse_tag | |
| run: | | |
| TAG_NAME=${GITHUB_REF#refs/tags/} | |
| VERSION=$(echo "$TAG_NAME" | cut -f1 -d"_") | |
| BRANCH_NAME=$(echo "$TAG_NAME" | cut -f2- -d"_") | |
| echo $VERSION | |
| echo $BRANCH_NAME | |
| echo "::set-output name=version::$VERSION" | |
| echo "::set-output name=branch_name::$BRANCH_NAME" | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| - name: Build release notes | |
| run: | | |
| touch ${{ env.RELEASE_NOTES_PATH }} | |
| cat CHANGELOG.md | sed -e '/./{H;$!d;}' -e "x;/##\ Version\ ${{ steps.parse_tag.outputs.version }}/"'!d;' >> ${{ env.RELEASE_NOTES_PATH }} | |
| - name: Create release | |
| id: create_release | |
| uses: actions/create-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| tag_name: ${{ github.ref }} | |
| release_name: ${{ steps.parse_tag.outputs.version }} | |
| body_path: ${{ env.RELEASE_NOTES_PATH }} | |
| build-for-windows: | |
| name: ${{ matrix.job.target }} (${{ matrix.job.os }}) ${{ matrix.environment }} | |
| needs: create-release | |
| runs-on: ${{ matrix.job.os }} | |
| environment: ${{ matrix.environment }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idenvironment | |
| environment: [SUPABASE_PRODUCTION, SUPABASE_STAGE] | |
| job: | |
| - { target: x86_64-pc-windows-msvc, os: windows-2019 } | |
| env: | |
| WINDOWS_APP_RELEASE_PATH: frontend\appflowy_flutter\product\${{ needs.create-release.outputs.version }}\windows | |
| WINDOWS_ZIP_NAME: ${{ matrix.environment }}_AppFlowy_${{ github.ref_name }}_windows-x86_64.zip | |
| WINDOWS_INSTALLER_NAME: ${{ matrix.environment }}_AppFlowy_${{ github.ref_name }}_windows-x86_64 | |
| steps: | |
| - name: Checkout source code | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: AppFlowy-IO/AppFlowy | |
| ref: ${{ needs.create-release.outputs.branch_name }} | |
| - name: Create Env file | |
| run: | | |
| touch .env | |
| echo SUPABASE_URL=${{ secrets.SUPABASE_URL }} >> .env | |
| echo SUPABASE_ANON_KEY=${{ secrets.SUPABASE_ANON_KEY }} >> .env | |
| working-directory: frontend/appflowy_flutter | |
| - name: Install flutter | |
| uses: subosito/flutter-action@v2 | |
| with: | |
| channel: "stable" | |
| flutter-version: ${{ env.FLUTTER_VERSION }} | |
| cache: true | |
| - name: Install Rust toolchain | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: ${{ env.RUST_TOOLCHAIN }} | |
| target: ${{ matrix.job.target }} | |
| override: true | |
| components: rustfmt | |
| profile: minimal | |
| - uses: Swatinem/rust-cache@v2 | |
| with: | |
| prefix-key: appflowy-lib-cache | |
| key: ${{ matrix.job.os }}-${{ matrix.job.target }} | |
| - name: Install prerequisites | |
| working-directory: frontend | |
| run: | | |
| vcpkg integrate install | |
| cargo install --force cargo-make | |
| cargo install --force duckscript_cli | |
| - name: Build Windows app | |
| working-directory: frontend | |
| run: | | |
| flutter config --enable-windows-desktop | |
| cargo make --env APP_VERSION=${{ needs.create-release.outputs.version }} --profile production-windows-x86 appflowy | |
| - name: Archive Asset | |
| uses: vimtor/action-zip@v1 | |
| with: | |
| files: ${{ env.WINDOWS_APP_RELEASE_PATH }}\ | |
| dest: ${{ env.WINDOWS_APP_RELEASE_PATH }}\${{ env.WINDOWS_ZIP_NAME }} | |
| - name: Copy installer config & icon file | |
| working-directory: frontend | |
| run: | | |
| cp scripts/windows_installer/* ../${{ env.WINDOWS_APP_RELEASE_PATH }} | |
| - name: Build installer executable | |
| working-directory: ${{ env.WINDOWS_APP_RELEASE_PATH }} | |
| run: | | |
| iscc /F${{ env.WINDOWS_INSTALLER_NAME }} inno_setup_config.iss /DAppVersion=${{ needs.create-release.outputs.version }} | |
| - name: Upload Asset | |
| id: upload-release-asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.WINDOWS_APP_RELEASE_PATH }}\${{ env.WINDOWS_ZIP_NAME }} | |
| asset_name: ${{ env.WINDOWS_ZIP_NAME }} | |
| asset_content_type: application/octet-stream | |
| - name: Upload Installer Asset | |
| id: upload-installer-asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.WINDOWS_APP_RELEASE_PATH }}\Output\${{ env.WINDOWS_INSTALLER_NAME }}.exe | |
| asset_name: ${{ env.WINDOWS_INSTALLER_NAME }}.exe | |
| asset_content_type: application/octet-stream | |
| build-for-macOS: | |
| name: ${{ matrix.job.target }} (${{ matrix.job.os }}) ${{ matrix.environment }} | |
| runs-on: ${{ matrix.job.os }} | |
| environment: ${{ matrix.environment }} | |
| needs: create-release | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| environment: [SUPABASE_PRODUCTION, SUPABASE_STAGE] | |
| job: | |
| - { target: x86_64-apple-darwin, os: macos-11 } | |
| env: | |
| MACOS_APP_RELEASE_PATH: frontend/appflowy_flutter/product/${{ needs.create-release.outputs.version }}/macos/Release | |
| MACOS_X86_ZIP_NAME: ${{ matrix.environment }}_AppFlowy_${{ github.ref_name }}_macos-x86_64.zip | |
| MACOS_DMG_NAME: ${{ matrix.environment }}_AppFlowy_${{ github.ref_name }}_macos-x86_64 | |
| steps: | |
| - name: Checkout source code | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: AppFlowy-IO/AppFlowy | |
| ref: ${{ needs.create-release.outputs.branch_name }} | |
| - name: Create Env file | |
| run: | | |
| touch .env | |
| echo SUPABASE_URL=${{ secrets.SUPABASE_URL }} >> .env | |
| echo SUPABASE_ANON_KEY=${{ secrets.SUPABASE_ANON_KEY }} >> .env | |
| working-directory: frontend/appflowy_flutter | |
| - name: Install flutter | |
| uses: subosito/flutter-action@v2 | |
| with: | |
| channel: "stable" | |
| flutter-version: ${{ env.FLUTTER_VERSION }} | |
| cache: true | |
| - name: Install Rust toolchain | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: ${{ env.RUST_TOOLCHAIN }} | |
| target: ${{ matrix.job.target }} | |
| override: true | |
| components: rustfmt | |
| profile: minimal | |
| - uses: Swatinem/rust-cache@v2 | |
| with: | |
| prefix-key: appflowy-lib-cache | |
| key: ${{ matrix.job.os }}-${{ matrix.job.target }} | |
| - name: Install prerequisites | |
| working-directory: frontend | |
| run: | | |
| cargo install --force cargo-make | |
| cargo install --force duckscript_cli | |
| - name: Build AppFlowy | |
| working-directory: frontend | |
| run: | | |
| flutter config --enable-macos-desktop | |
| dart ./scripts/flutter_release_build/build_flowy.dart run . ${{ needs.create-release.outputs.version }} | |
| - name: Codesign AppFlowy | |
| run: | | |
| echo ${{ secrets.MACOS_CERTIFICATE }} | base64 --decode > certificate.p12 | |
| security create-keychain -p action build.keychain | |
| security default-keychain -s build.keychain | |
| security unlock-keychain -p action build.keychain | |
| security import certificate.p12 -k build.keychain -P ${{ secrets.MACOS_CERTIFICATE_PWD }} -T /usr/bin/codesign | |
| security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k action build.keychain | |
| /usr/bin/codesign --force --options runtime --deep --sign "${{ secrets.MACOS_CODESIGN_ID }}" "${{ env.MACOS_APP_RELEASE_PATH }}/AppFlowy.app" -v | |
| - name: Create macOS dmg | |
| run: | | |
| brew install create-dmg | |
| create-dmg \ | |
| --volname ${{ env.MACOS_DMG_NAME }} \ | |
| --hide-extension "AppFlowy.app" \ | |
| --background frontend/scripts/dmg_assets/AppFlowyInstallerBackground.jpg \ | |
| --window-size 600 450 \ | |
| --icon-size 94 \ | |
| --icon "AppFlowy.app" 141 249 \ | |
| --app-drop-link 458 249 \ | |
| "${{ env.MACOS_APP_RELEASE_PATH }}/${{ env.MACOS_DMG_NAME }}.dmg" \ | |
| "${{ env.MACOS_APP_RELEASE_PATH }}/AppFlowy.app" | |
| - name: Notarize AppFlowy | |
| run: | | |
| xcrun notarytool submit ${{ env.MACOS_APP_RELEASE_PATH }}/${{ env.MACOS_DMG_NAME }}.dmg --apple-id ${{ secrets.MACOS_NOTARY_USER }} --team-id ${{ secrets.MACOS_TEAM_ID }} --password ${{ secrets.MACOS_NOTARY_PWD }} -v -f "json" --wait | |
| - name: Archive Asset | |
| working-directory: ${{ env.MACOS_APP_RELEASE_PATH }} | |
| run: zip --symlinks -qr ${{ env.MACOS_X86_ZIP_NAME }} AppFlowy.app | |
| - name: Upload Asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.MACOS_APP_RELEASE_PATH }}/${{ env.MACOS_X86_ZIP_NAME }} | |
| asset_name: ${{ env.MACOS_X86_ZIP_NAME }} | |
| asset_content_type: application/octet-stream | |
| - name: Upload DMG Asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.MACOS_APP_RELEASE_PATH }}/${{ env.MACOS_DMG_NAME }}.dmg | |
| asset_name: ${{ env.MACOS_DMG_NAME }}.dmg | |
| asset_content_type: application/octet-stream | |
| build-for-linux: | |
| name: ${{ matrix.job.target }} (${{ matrix.job.os }}) ${{ matrix.environment }} | |
| runs-on: ${{ matrix.job.os }} | |
| environment: ${{ matrix.environment }} | |
| needs: create-release | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| environment: [SUPABASE_PRODUCTION, SUPABASE_STAGE] | |
| job: | |
| - { | |
| arch: x86_64, | |
| target: x86_64-unknown-linux-gnu, | |
| os: ubuntu-20.04, | |
| flutter_profile: production-linux-x86_64, | |
| } | |
| env: | |
| LINUX_APP_RELEASE_PATH: frontend/appflowy_flutter/product/${{ needs.create-release.outputs.version }}/linux/Release | |
| LINUX_ZIP_NAME: ${{ matrix.environment }}_AppFlowy_${{ matrix.job.target }}_${{ matrix.job.os }}.tar.gz | |
| LINUX_PACKAGE_NAME: ${{ matrix.environment }}_AppFlowy_${{ github.ref_name }}_${{ matrix.job.os }}.deb | |
| steps: | |
| - name: Checkout source code | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: AppFlowy-IO/AppFlowy | |
| ref: ${{ needs.create-release.outputs.branch_name }} | |
| - name: Create Env file | |
| run: | | |
| touch .env | |
| echo SUPABASE_URL=${{ secrets.SUPABASE_URL }} >> .env | |
| echo SUPABASE_ANON_KEY=${{ secrets.SUPABASE_ANON_KEY }} >> .env | |
| working-directory: frontend/appflowy_flutter | |
| - name: Install flutter | |
| uses: subosito/flutter-action@v2 | |
| with: | |
| channel: "stable" | |
| flutter-version: ${{ env.FLUTTER_VERSION }} | |
| cache: true | |
| - name: Install Rust toolchain | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: ${{ env.RUST_TOOLCHAIN }} | |
| target: ${{ matrix.job.target }} | |
| override: true | |
| components: rustfmt | |
| profile: minimal | |
| - uses: Swatinem/rust-cache@v2 | |
| with: | |
| prefix-key: appflowy-lib-cache | |
| key: ${{ matrix.job.os }}-${{ matrix.job.target }} | |
| - name: Install prerequisites | |
| working-directory: frontend | |
| run: | | |
| sudo wget -qO /etc/apt/trusted.gpg.d/dart_linux_signing_key.asc https://dl-ssl.google.com/linux/linux_signing_key.pub | |
| sudo apt-get update | |
| sudo apt-get install -y build-essential libsqlite3-dev libssl-dev clang cmake ninja-build pkg-config libgtk-3-dev | |
| sudo apt-get install keybinder-3.0 | |
| source $HOME/.cargo/env | |
| cargo install --force cargo-make | |
| cargo install --force duckscript_cli | |
| rustup target add ${{ matrix.job.target }} | |
| - name: Install gcc-aarch64-linux-gnu | |
| if: ${{ matrix.job.target == 'aarch64-unknown-linux-gnu' }} | |
| working-directory: frontend | |
| run: | | |
| sudo apt-get install -qy binutils-aarch64-linux-gnu gcc-aarch64-linux-gnu g++-aarch64-linux-gnu | |
| - name: Build AppFlowy | |
| working-directory: frontend | |
| run: | | |
| flutter config --enable-linux-desktop | |
| dart ./scripts/flutter_release_build/build_flowy.dart run . ${{ needs.create-release.outputs.version }} | |
| - name: Archive Asset | |
| working-directory: ${{ env.LINUX_APP_RELEASE_PATH }} | |
| run: tar -czf ${{ env.LINUX_ZIP_NAME }} * | |
| - name: Build Linux package (.deb) | |
| working-directory: frontend | |
| run: | | |
| sh scripts/linux_distribution/deb/build_deb.sh appflowy_flutter/product/${{ needs.create-release.outputs.version }}/linux/Release ${{ needs.create-release.outputs.version }} ${{ env.LINUX_PACKAGE_NAME }} | |
| - name: Upload Asset | |
| id: upload-release-asset | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.LINUX_APP_RELEASE_PATH }}/${{ env.LINUX_ZIP_NAME }} | |
| asset_name: ${{ env.LINUX_ZIP_NAME }} | |
| asset_content_type: application/octet-stream | |
| - name: Upload Asset Install Package | |
| id: upload-release-asset-install-package | |
| uses: actions/upload-release-asset@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| upload_url: ${{ needs.create-release.outputs.upload_url }} | |
| asset_path: ${{ env.LINUX_APP_RELEASE_PATH }}/${{ env.LINUX_PACKAGE_NAME }} | |
| asset_name: ${{ env.LINUX_PACKAGE_NAME }} | |
| asset_content_type: application/octet-stream | |
| notify-slack: | |
| runs-on: ubuntu-latest | |
| needs: [build-for-linux, build-for-windows, build-for-macOS] | |
| steps: | |
| - uses: 8398a7/action-slack@v3 | |
| with: | |
| status: ${{ job.status }} | |
| text: | | |
| Workflow ${{ github.workflow }} in repository ${{ github.repository }} has completed. | |
| Check the release package at https://github.com/${{ github.repository }}/releases/tag/${{ github.ref }} | |
| fields: repo,message,commit,author,eventName,ref,workflow,job,took | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| if: always() |