chore(config): 更新版本号至v0.5.0 #22
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Release | |
| permissions: | |
| contents: write | |
| on: | |
| push: | |
| tags: | |
| - "v*" | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: "Version to release (e.g., v1.0.0). Leave empty to auto-bump from latest tag." | |
| required: false | |
| default: "" | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: stable | |
| cache: true | |
| - name: Cache Go modules | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| restore-keys: | | |
| ${{ runner.os }}-go- | |
| # 取得版本号： | |
| # - workflow_dispatch：若未填写则自动 vX.Y.(Z+1)，并创建/推送该 tag | |
| # - push tag：使用该 tag | |
| - name: Get version | |
| id: version | |
| run: | | |
| set -e | |
| git fetch --tags --force --prune | |
| if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then | |
| INPUT_VER="${{ github.event.inputs.version }}" | |
| if [ -n "$INPUT_VER" ]; then | |
| NEW_VER="$INPUT_VER" | |
| else | |
| LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0") | |
| ver="${LAST_TAG#v}" | |
| IFS='.' read -r MAJ MIN PAT <<< "$ver" | |
| : "${MAJ:=0}" ; : "${MIN:=0}" ; : "${PAT:=0}" | |
| NEW_VER="v${MAJ}.${MIN}.$((PAT+1))" | |
| fi | |
| echo "VERSION=$NEW_VER" >> $GITHUB_OUTPUT | |
| else | |
| echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT | |
| fi | |
| - name: Create and push tag (manual dispatch only) | |
| if: github.event_name == 'workflow_dispatch' | |
| run: | | |
| set -e | |
| TAG="${{ steps.version.outputs.VERSION }}" | |
| echo "Ensure tag exists: $TAG" | |
| if ! git rev-parse -q --verify "refs/tags/$TAG" >/dev/null; then | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| git tag -a "$TAG" -m "Release $TAG" | |
| fi | |
| git push origin "$TAG" | |
| - name: Download dependencies | |
| run: go mod download | |
| - name: Verify dependencies | |
| run: go mod verify | |
| - name: Install UPX | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y upx | |
| - name: Build for multiple platforms | |
| env: | |
| CGO_ENABLED: 0 | |
| run: | | |
| set -e | |
| mkdir -p release build | |
| # 将版本号写入 internal/config.Version，供更新逻辑使用 | |
| BASE_LDFLAGS="-X 'github.com/https-cert/deploy/internal/config.Version=${{ steps.version.outputs.VERSION }}'" | |
| STRIP_LDFLAGS="-s -w ${BASE_LDFLAGS}" | |
| echo "Build macOS..." | |
| mkdir -p build/darwin-amd64 build/darwin-arm64 | |
| GOOS=darwin GOARCH=amd64 go build -ldflags="${STRIP_LDFLAGS}" -trimpath -o build/darwin-amd64/anssl main.go | |
| tar -C build/darwin-amd64 -czf release/anssl-darwin-amd64.tar.gz anssl | |
| GOOS=darwin GOARCH=arm64 go build -ldflags="${STRIP_LDFLAGS}" -trimpath -o build/darwin-arm64/anssl main.go | |
| tar -C build/darwin-arm64 -czf release/anssl-darwin-arm64.tar.gz anssl | |
| echo "Build Linux..." | |
| mkdir -p build/linux-amd64 build/linux-arm64 | |
| GOOS=linux GOARCH=amd64 go build -ldflags="${STRIP_LDFLAGS}" -trimpath -o build/linux-amd64/anssl main.go | |
| echo "UPX compress linux-amd64..." | |
| upx --best build/linux-amd64/anssl || echo "⚠️ ignore UPX failure: linux-amd64" | |
| tar -C build/linux-amd64 -czf release/anssl-linux-amd64.tar.gz anssl | |
| GOOS=linux GOARCH=arm64 go build -ldflags="${STRIP_LDFLAGS}" -trimpath -o build/linux-arm64/anssl main.go | |
| echo "UPX compress linux-arm64..." | |
| upx --best build/linux-arm64/anssl || echo "⚠️ ignore UPX failure: linux-arm64" | |
| tar -C build/linux-arm64 -czf release/anssl-linux-arm64.tar.gz anssl | |
| echo "Build Windows..." | |
| mkdir -p build/windows-amd64 build/windows-arm64 | |
| GOOS=windows GOARCH=amd64 go build -ldflags="${BASE_LDFLAGS}" -trimpath -o build/windows-amd64/anssl.exe main.go | |
| (cd build/windows-amd64 && zip -q ../../release/anssl-windows-amd64.zip anssl.exe) | |
| GOOS=windows GOARCH=arm64 go build -ldflags="${BASE_LDFLAGS}" -trimpath -o build/windows-arm64/anssl.exe main.go | |
| (cd build/windows-arm64 && zip -q ../../release/anssl-windows-arm64.zip anssl.exe) | |
| - name: Show build info | |
| run: | | |
| echo "=== Build Info ===" | |
| echo "Version: ${{ steps.version.outputs.VERSION }}" | |
| echo "Go: $(go version)" | |
| echo "Files:" | |
| ls -lh release/ | |
| - name: Generate checksums | |
| run: | | |
| cd release | |
| sha256sum anssl-* > checksums.txt | |
| echo "checksums generated:" | |
| cat checksums.txt | |
| - name: Create all-platforms archive | |
| run: | | |
| cd release | |
| echo "Creating all-platforms archive..." | |
| tar -czf anssl-all-platforms.tar.gz anssl-* | |
| echo "Archive created:" | |
| ls -lh anssl-all-platforms.tar.gz | |
| # 生成详细的更新日志 | |
| - name: Generate changelog | |
| id: changelog | |
| run: | | |
| set -e | |
| # 获取上一个 tag | |
| PREVIOUS_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "") | |
| CURRENT_TAG="${{ steps.version.outputs.VERSION }}" | |
| echo "Generating changelog from ${PREVIOUS_TAG} to ${CURRENT_TAG}..." | |
| # 创建 changelog 文件 | |
| CHANGELOG_FILE="release/CHANGELOG.md" | |
| echo "## 📝 更新内容" > $CHANGELOG_FILE | |
| echo "" >> $CHANGELOG_FILE | |
| if [ -z "$PREVIOUS_TAG" ]; then | |
| # 首次发布，列出所有提交 | |
| git log --pretty=format:"- %s ([%h](https://github.com/${{ github.repository }}/commit/%H))" >> $CHANGELOG_FILE | |
| else | |
| # 列出自上个版本以来的所有提交 | |
| git log ${PREVIOUS_TAG}..HEAD --pretty=format:"- %s ([%h](https://github.com/${{ github.repository }}/commit/%H))" >> $CHANGELOG_FILE | |
| fi | |
| echo "" >> $CHANGELOG_FILE | |
| echo "" >> $CHANGELOG_FILE | |
| echo "---" >> $CHANGELOG_FILE | |
| echo "" >> $CHANGELOG_FILE | |
| if [ -z "$PREVIOUS_TAG" ]; then | |
| echo "**初始版本发布**" >> $CHANGELOG_FILE | |
| else | |
| echo "**完整更新日志**: https://github.com/${{ github.repository }}/compare/${PREVIOUS_TAG}...${CURRENT_TAG}" >> $CHANGELOG_FILE | |
| fi | |
| # 输出到控制台查看 | |
| echo "Generated changelog:" | |
| cat $CHANGELOG_FILE | |
| # 将 changelog 内容保存到环境变量（用于 release body） | |
| echo "CHANGELOG_CONTENT<<EOF" >> $GITHUB_OUTPUT | |
| cat $CHANGELOG_FILE >> $GITHUB_OUTPUT | |
| echo "EOF" >> $GITHUB_OUTPUT | |
| - name: Upload release artifacts (for job debug/download) | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: release-files | |
| path: release/ | |
| retention-days: 30 | |
| - name: Create GitHub Release (push trigger) | |
| uses: softprops/action-gh-release@v2 | |
| if: github.event_name == 'push' | |
| with: | |
| body: ${{ steps.changelog.outputs.CHANGELOG_CONTENT }} | |
| files: | | |
| release/anssl-darwin-amd64.tar.gz | |
| release/anssl-darwin-arm64.tar.gz | |
| release/anssl-linux-amd64.tar.gz | |
| release/anssl-linux-arm64.tar.gz | |
| release/anssl-windows-amd64.zip | |
| release/anssl-windows-arm64.zip | |
| release/anssl-all-platforms.tar.gz | |
| release/checksums.txt | |
| release/CHANGELOG.md | |
| draft: false | |
| prerelease: false | |
| - name: Create GitHub Release (manual trigger) | |
| uses: softprops/action-gh-release@v2 | |
| if: github.event_name == 'workflow_dispatch' | |
| with: | |
| tag_name: ${{ steps.version.outputs.VERSION }} | |
| name: Release ${{ steps.version.outputs.VERSION }} | |
| body: ${{ steps.changelog.outputs.CHANGELOG_CONTENT }} | |
| files: | | |
| release/anssl-darwin-amd64.tar.gz | |
| release/anssl-darwin-arm64.tar.gz | |
| release/anssl-linux-amd64.tar.gz | |
| release/anssl-linux-arm64.tar.gz | |
| release/anssl-windows-amd64.zip | |
| release/anssl-windows-arm64.zip | |
| release/anssl-all-platforms.tar.gz | |
| release/checksums.txt | |
| release/CHANGELOG.md | |
| draft: false | |
| prerelease: false |