Remove comments from release workflow file #4
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: release-desktop | |
| on: | |
| push: | |
| tags: ['v*'] | |
| jobs: | |
| build: | |
| permissions: | |
| contents: write # publish the GitHub Release on this repo | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - platform: macos-latest | |
| args: --target universal-apple-darwin | |
| - platform: windows-latest | |
| args: '' | |
| runs-on: ${{ matrix.platform }} | |
| steps: | |
| # 1. Pull the private source from GitLab into ./source (read-only token; never stored here). | |
| - name: Clone private source | |
| run: git clone --depth 1 --branch main "https://oauth2:${{ secrets.GITLAB_TOKEN }}@gitlab.com/syqel/hzp-web-next.git" source | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| cache: npm | |
| cache-dependency-path: source/package-lock.json | |
| - uses: dtolnay/rust-toolchain@stable | |
| with: | |
| targets: ${{ matrix.platform == 'macos-latest' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }} | |
| - name: Install deps | |
| run: npm ci | |
| working-directory: source | |
| # Windows code-signing via Azure Trusted Signing — the CLI tauri.conf's signCommand calls. | |
| - name: Install trusted-signing-cli (Windows) | |
| if: matrix.platform == 'windows-latest' | |
| run: cargo install trusted-signing-cli | |
| - uses: tauri-apps/tauri-action@v0 | |
| env: | |
| # auto-provided by Actions; tauri-action needs it to create + upload the GitHub Release | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # layer 2 — updater artifact signature (key generated 2026-07-07, no password) | |
| TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }} | |
| TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }} | |
| # layer 1 (macOS) — Apple cert + notarization (omit for a first unsigned test build) | |
| APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }} | |
| APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }} | |
| APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }} | |
| APPLE_ID: ${{ secrets.APPLE_ID }} | |
| APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }} | |
| APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} | |
| # layer 1 (Windows) — Azure Trusted Signing | |
| AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }} | |
| AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }} | |
| AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET }} | |
| with: | |
| projectPath: source | |
| tagName: ${{ github.ref_name }} | |
| releaseName: 'HZP ${{ github.ref_name }}' | |
| releaseDraft: true | |
| prerelease: false | |
| includeUpdaterJson: true # generates latest.json for the updater endpoint | |
| args: ${{ matrix.args }} |