add release workflow

Signed-off-by: Aaqa Ishtyaq <aaqaishtyaq@gmail.com>

Author: aaqaishtyaq

.github/workflows/release.yml

@@ -1,56 +1,150 @@
 name: Release
 
-permissions:
-  contents: write
-
 on:
   push:
-    tags:
-      - v[0-9]+.*
+    branches:
+      - main
+
+permissions:
+  contents: write
 
 env:
-  RUSTFLAGS: -D warnings --cfg tokio_unstable
   CARGO_TERM_COLOR: always
+  RUSTFLAGS: -D warnings --cfg tokio_unstable
 
 jobs:
-  create-release:
-    runs-on: ubuntu-latest
+  release-meta:
+    name: Prepare release metadata
+    runs-on: ubuntu-24.04
+    outputs:
+      release_name: ${{ steps.meta.outputs.release_name }}
+      short_sha: ${{ steps.meta.outputs.short_sha }}
+      tag: ${{ steps.meta.outputs.tag }}
+      version: ${{ steps.meta.outputs.version }}
     steps:
-      - uses: actions/checkout@v3
-      - uses: taiki-e/create-gh-release-action@v1
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/checkout@v4
+
+      - id: meta
+        name: Derive release metadata
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          version="$(sed -n 's/^version = "\(.*\)"$/\1/p' crates/corrosion/Cargo.toml | head -n 1)"
+          if [[ -z "${version}" ]]; then
+            echo "Failed to read the corrosion package version" >&2
+            exit 1
+          fi
 
-  upload-assets:
+          short_sha="${GITHUB_SHA::7}"
+          tag="v${version}-main-${short_sha}"
+          release_name="corrosion ${version} (${short_sha})"
+
+          {
+            echo "release_name=${release_name}"
+            echo "short_sha=${short_sha}"
+            echo "tag=${tag}"
+            echo "version=${version}"
+          } >> "${GITHUB_OUTPUT}"
+
+  build-assets:
+    name: Build ${{ matrix.arch }} release asset
+    needs: release-meta
+    runs-on: ${{ matrix.os }}
     strategy:
+      fail-fast: false
       matrix:
         include:
-          - target: aarch64-apple-darwin
-            os: macos-latest
-          - target: x86_64-unknown-linux-gnu
-            os: ubuntu-latest
-          - target: aarch64-unknown-linux-gnu
-            os: ubuntu-latest
-    runs-on: ${{ matrix.os }}
-    env:
-      SCCACHE_GHA_ENABLED: "true"
-      RUSTC_WRAPPER: "sccache"
+          - arch: amd64
+            os: ubuntu-24.04
+            target: x86_64-unknown-linux-gnu
+          - arch: arm64
+            os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-gnu
     steps:
-      - uses: actions/checkout@v3
-
-      - uses: rui314/setup-mold@v1
+      - uses: actions/checkout@v4
 
-      - uses: taiki-e/setup-cross-toolchain-action@v1
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
         with:
-          target: ${{ matrix.target }}
-        if: startsWith(matrix.os, 'ubuntu')
+          toolchain: 1.89
+          targets: ${{ matrix.target }}
+
+      - name: Install Linux build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes libsystemd-dev pkg-config
+
+      - name: Build release binary
+        run: cargo build --locked --release --bin corrosion --target ${{ matrix.target }}
 
-      - name: Run sccache-cache
-        uses: mozilla-actions/sccache-action@v0.0.9
+      - name: Package release archive
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          mkdir -p dist
+          cp "target/${{ matrix.target }}/release/corrosion" dist/corrosion
+          tar -C dist -czf "corrosion-linux-${{ matrix.arch }}.tar.gz" corrosion
+          sha256sum "corrosion-linux-${{ matrix.arch }}.tar.gz" > "corrosion-linux-${{ matrix.arch }}.tar.gz.sha256"
+
+      - name: Upload packaged assets
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-${{ matrix.arch }}
+          path: |
+            corrosion-linux-${{ matrix.arch }}.tar.gz
+            corrosion-linux-${{ matrix.arch }}.tar.gz.sha256
 
-      - uses: taiki-e/upload-rust-binary-action@v1
+  publish-release:
+    name: Publish GitHub release
+    needs:
+      - release-meta
+      - build-assets
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Download packaged assets
+        uses: actions/download-artifact@v4
         with:
-          bin: corrosion
-          archive: "corrosion-$target"
-          target: ${{ matrix.target }}
-          token: ${{ secrets.GITHUB_TOKEN }}
+          merge-multiple: true
+          path: dist
+          pattern: release-*
+
+      - name: Write release notes
+        shell: bash
+        run: |
+          cat <<EOF > release-notes.md
+          Automated prerelease from main.
+
+          - Version: \`${{ needs.release-meta.outputs.version }}\`
+          - Commit: [\`${{ github.sha }}\`](https://github.com/${{ github.repository }}/commit/${{ github.sha }})
+
+          Release assets:
+          - \`corrosion-linux-amd64.tar.gz\`
+          - \`corrosion-linux-arm64.tar.gz\`
+          EOF
+
+      - name: Create or update GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_NAME: ${{ needs.release-meta.outputs.release_name }}
+          TAG: ${{ needs.release-meta.outputs.tag }}
+        shell: bash
+        run: |
+          set -euo pipefail
+
+          if gh release view "${TAG}" >/dev/null 2>&1; then
+            gh release edit "${TAG}" \
+              --notes-file release-notes.md \
+              --prerelease \
+              --title "${RELEASE_NAME}"
+          else
+            gh release create "${TAG}" \
+              --latest=false \
+              --notes-file release-notes.md \
+              --prerelease \
+              --target "${GITHUB_SHA}" \
+              --title "${RELEASE_NAME}"
+          fi
+
+          gh release upload "${TAG}" dist/* --clobber