nebi/.goreleaser.yaml at main · MUFFANUJ/nebi · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
# GoReleaser configuration for nebi
version: 2

before:
  hooks:
    # Build frontend before creating release
    - sh -c "cd frontend && npm install && npm run build"
    # Copy frontend dist to internal/web/dist for embedding
    - sh -c "rm -rf internal/web/dist && cp -r frontend/dist internal/web/dist"

builds:
  - id: nebi
    main: ./cmd/nebi
    binary: nebi
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - windows
    goarch:
      - amd64
      - arm64
    ignore:
      - goos: windows
        goarch: arm64
    ldflags:
      - -s -w
      - -X main.Version={{.Version}}
      - -X main.commit={{.Commit}}
      - -X main.date={{.Date}}

archives:
  - id: nebi
    name_template: >-
      {{ .ProjectName }}_{{ .Version }}_
      {{- if eq .Os "darwin" }}macOS
      {{- else }}{{ .Os }}{{ end }}_
      {{- if eq .Arch "amd64" }}x86_64
      {{- else }}{{ .Arch }}{{ end }}
    format_overrides:
      - goos: windows
        formats: [zip]
    files:
      - LICENSE*
      - README*
      - CHANGELOG*

# Sign and notarize the macOS CLI binaries. GoReleaser bundles `quill`, so this
# runs cross-platform on the ubuntu-latest release runner — no macOS runner or
# codesign/xcrun needed. The `enabled` guard mirrors desktop.yml's
# `env.MACOS_SIGNING_CERT_B64 != ''` check so secret-less builds (fork PRs)
# skip signing instead of failing. Note: a bare CLI binary can't have a
# notarization ticket stapled (stapling needs a .app/.dmg/.pkg container), so
# Gatekeeper does an online notarization check on first run.
notarize:
  macos:
    - enabled: '{{ isEnvSet "MACOS_SIGN_P12" }}'
      ids:
        - nebi
      sign:
        certificate: "{{.Env.MACOS_SIGN_P12}}"       # base64 of the Developer ID Application .p12
        password: "{{.Env.MACOS_SIGN_PASSWORD}}"
      notarize:
        issuer_id: "{{.Env.MACOS_NOTARY_ISSUER_ID}}"
        key_id: "{{.Env.MACOS_NOTARY_KEY_ID}}"
        key: "{{.Env.MACOS_NOTARY_KEY}}"             # base64 of the App Store Connect .p8
        wait: true
        timeout: 20m

checksum:
  name_template: 'checksums.txt'
  algorithm: sha256

snapshot:
  version_template: "{{ incpatch .Version }}-{{ .ShortCommit }}"

changelog:
  sort: asc
  use: github
  filters:
    exclude:
      - '^docs:'
      - '^test:'
      - '^chore:'
      - typo
      - Merge pull request
      - Merge branch
  groups:
    - title: 'New Features'
      regexp: "^.*feat[(\\w)]*:+.*$"
      order: 0
    - title: 'Bug Fixes'
      regexp: "^.*fix[(\\w)]*:+.*$"
      order: 1
    - title: 'Enhancements'
      regexp: "^.*enhancement[(\\w)]*:+.*$"
      order: 2
    - title: 'Others'
      order: 999

release:
  github:
    owner: nebari-dev
    name: nebi
  draft: false
  prerelease: auto
  mode: replace
  header: |
    ## nebi {{ .Tag }} ({{ .Date }})

    Welcome to this new release of nebi!
  footer: |
    ## Installation

    ### Binary Installation

    Download the appropriate binary for your platform from the assets below.

    ---

    **Full Changelog**: https://github.com/nebari-dev/nebi/compare/{{ .PreviousTag }}...{{ .Tag }}

announce:
  skip: true