chore(release): prefer tar.gz artifacts for all releases

Author: upsetbit

.goreleaser.yaml

@@ -61,32 +61,18 @@ builds:
 
 archives:
   # default — three-binary bundle. Homebrew's Cask references this and
-  # it remains the fallback for anything that still expects a tar.gz.
+  # keep this as the sole package format for releases.
   - id: default
     formats: [tar.gz]
     name_template: '{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
     files:
       - README.md
       - LICENSE*
-  # Raw per-binary uploads so the release page lists each binary by
-  # name and install.sh / curl users can pull only what they need.
-  - id: prosa-bin
-    ids: [prosa]
-    formats: [binary]
-    name_template: '{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
-  - id: prosa-server-bin
-    ids: [prosa-server]
-    formats: [binary]
-    name_template: '{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
-  - id: prosa-panel-bin
-    ids: [prosa-panel]
-    formats: [binary]
-    name_template: '{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}'
 
 homebrew_casks:
   - name: prosa
     # ids pins the Cask to the tar.gz bundle so it keeps installing all
-    # three binaries even though we now publish raw per-binary archives.
+    # three binaries from one artifact.
     ids: [default]
     binaries:
       - prosa

docs/distribution/install-sh.md

@@ -68,8 +68,9 @@ GitHub Release, with these exact names:
 - `prosa_<version-without-v>_<os>_<arch>.tar.gz`
 - `checksums.txt` (lines of `<sha256>  <filename>`)
 
-GoReleaser is configured to produce both. If the archive format ever
-changes, `install.sh` and `.goreleaser.yaml` must change together.
+GoReleaser is configured to produce the tarball and `checksums.txt`. If the
+archive format ever changes, `install.sh` and `.goreleaser.yaml` must change
+together.
 
 ## Behavior when things go wrong
 

docs/distribution/release.md

@@ -81,12 +81,8 @@ GitHub Actions runs `.github/workflows/release.yml`. One job, multi-step:
 `goreleaser release --clean` runs in the Actions runner.
 
 - Builds the 12 binaries (3 binaries × 2 OS × 2 arch).
-- Publishes each binary as a raw release asset
-  (`prosa_<v>_<os>_<arch>`, `prosa-server_<v>_<os>_<arch>`,
-  `prosa-panel_<v>_<os>_<arch>` — 12 total).
-- Also publishes a three-binary bundle tar.gz per OS/arch
-  (`prosa_<v>_<os>_<arch>.tar.gz` — 4 total) that the Homebrew Cask
-  installs and `install.sh` falls back to when raw assets are missing.
+- Publishes the three-binary tar.gz bundle per OS/arch
+  (`prosa_<v>_<os>_<arch>.tar.gz` — 4 total) that the Homebrew Cask installs.
 - Computes `checksums.txt` covering every asset.
 - Renders the GitHub Release (title = `prosa v0.11.0`, body = grouped
   changelog).
@@ -142,10 +138,12 @@ PROSA_VERSION=v0.11.0 \
   curl -fsSL https://raw.githubusercontent.com/c3-oss/prosa/master/install.sh | sh
 ~/.local/bin/prosa --version
 
-# Direct raw binary — one-liner for users who want just one component
-curl -fsSL -o ~/.local/bin/prosa-server \
-  https://github.com/c3-oss/prosa/releases/download/v0.11.0/prosa-server_0.11.0_darwin_arm64
-chmod +x ~/.local/bin/prosa-server
+# Direct tarball install (or use `install.sh` and set INSTALL_BINS):
+mkdir -p /tmp/prosa-install && cd /tmp/prosa-install
+curl -fsSL -o prosa_0.11.0_darwin_arm64.tar.gz \
+  https://github.com/c3-oss/prosa/releases/download/v0.11.0/prosa_0.11.0_darwin_arm64.tar.gz
+tar -xzf prosa_0.11.0_darwin_arm64.tar.gz prosa-server
+install -m 0755 prosa-server ~/.local/bin/prosa-server
 
 # npm
 npm install -g @c3-oss/prosa@0.11.0

install.sh

@@ -4,9 +4,8 @@
 # This script:
 #   1. Detects your OS (Linux or Darwin) and CPU arch (amd64 or arm64).
 #   2. Resolves the latest prosa release from GitHub (or honors PROSA_VERSION).
-#   3. Downloads each selected binary plus checksums.txt directly from
-#      the release page (no tar.gz intermediate).
-#   4. Verifies each binary's sha256 before writing anything to disk.
+#   3. Downloads the per-platform release tarball plus checksums.txt.
+#   4. Verifies the release tarball sha256 before writing anything to disk.
 #   5. Installs the prosa binary (and optionally prosa-server / prosa-panel)
 #      into $INSTALL_DIR (default ~/.local/bin).
 #
@@ -126,21 +125,32 @@ main() {
     # shellcheck disable=SC2064  # expand $tmp at trap-registration time
     trap "rm -rf '$tmp'" EXIT INT TERM
 
+    require_cmd tar
     curl -fsSL -o "$tmp/checksums.txt" "$base/checksums.txt"
 
     mkdir -p "$INSTALL_DIR"
-    for bin in $INSTALL_BINS; do
-        asset="${bin}_${semver}_${OS}_${ARCH}"
-        info "downloading $asset ..."
-        curl -fsSL -o "$tmp/$asset" "$base/$asset"
 
-        expected=$(awk -v f="$asset" '$2 == f { print $1 }' "$tmp/checksums.txt")
-        if [ -z "$expected" ]; then
-            err "could not find $asset in checksums.txt"
+    asset="prosa_${semver}_${OS}_${ARCH}.tar.gz"
+    info "downloading $asset ..."
+    curl -fsSL -o "$tmp/$asset" "$base/$asset"
+
+    expected=$(awk -v f="$asset" '$2 == f { print $1 }' "$tmp/checksums.txt")
+    if [ -z "$expected" ]; then
+        err "could not find $asset in checksums.txt"
+    fi
+    sha256_verify "$tmp/$asset" "$expected"
+
+    unpack="$tmp/unpacked"
+    mkdir -p "$unpack"
+    tar -xzf "$tmp/$asset" -C "$unpack"
+
+    for bin in $INSTALL_BINS; do
+        src="$unpack/$bin"
+        if [ ! -f "$src" ]; then
+            err "could not find $bin in $asset"
         fi
-        sha256_verify "$tmp/$asset" "$expected"
 
-        install -m 0755 "$tmp/$asset" "$INSTALL_DIR/$bin"
+        install -m 0755 "$src" "$INSTALL_DIR/$bin"
         info "installed $bin -> $INSTALL_DIR/$bin"
     done