fix(ci): add attestation permissions for GHCR push, skip PGXN if no s… #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | ||
| on: | ||
| push: | ||
| tags: ['v[0-9]+.[0-9]+.[0-9]+'] | ||
| permissions: | ||
| contents: write | ||
| packages: write | ||
| attestations: write | ||
| id-token: write | ||
| env: | ||
| PGRX_VERSION: "=0.17.0" | ||
| jobs: | ||
| test: | ||
| name: Test | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: dtolnay/rust-toolchain@stable | ||
| - uses: Swatinem/rust-cache@v2 | ||
| - run: cargo test -p kazsearch-core --test stem_tests | ||
| - run: cargo build -p kazsearch-cli --release | ||
| - run: ./target/release/kazsearch stem алмаларымыздағы | ||
| build-deb: | ||
| name: .deb / PG ${{ matrix.pg }} | ||
| needs: test | ||
| runs-on: ubuntu-latest | ||
| strategy: | ||
| matrix: | ||
| pg: [16, 17, 18] | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Install PostgreSQL ${{ matrix.pg }} dev headers | ||
| run: | | ||
| sudo apt-get update | ||
| sudo sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list' | ||
| curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/pgdg.gpg | ||
| sudo apt-get update | ||
| sudo apt-get install -y postgresql-${{ matrix.pg }} postgresql-server-dev-${{ matrix.pg }} libclang-dev pkg-config build-essential | ||
| - uses: dtolnay/rust-toolchain@stable | ||
| - uses: Swatinem/rust-cache@v2 | ||
| - name: Install cargo-pgrx | ||
| run: cargo install --locked cargo-pgrx --version "${{ env.PGRX_VERSION }}" | ||
| - name: Init pgrx for PG ${{ matrix.pg }} | ||
| run: cargo pgrx init --pg${{ matrix.pg }}=$(which pg_config) | ||
| - name: Package extension | ||
| run: | | ||
| cargo pgrx package --pg-config $(which pg_config) \ | ||
| --features pg${{ matrix.pg }} --no-default-features -p pg_kazsearch | ||
| - name: Build .deb | ||
| run: | | ||
| VERSION=${GITHUB_REF_NAME#v} | ||
| PKG_NAME=postgresql-${{ matrix.pg }}-pg-kazsearch | ||
| PKG_DIR=${PKG_NAME}_${VERSION}_amd64 | ||
| PGRX_OUT=target/release/pg_kazsearch-pg${{ matrix.pg }} | ||
| mkdir -p ${PKG_DIR}/DEBIAN | ||
| cat > ${PKG_DIR}/DEBIAN/control << CTRL | ||
| Package: ${PKG_NAME} | ||
| Version: ${VERSION} | ||
| Architecture: amd64 | ||
| Depends: postgresql-${{ matrix.pg }} | ||
| Maintainer: Darkhan Akhmetov <darkhanahmetov2005@gmail.com> | ||
| Description: Kazakh full-text search stemmer for PostgreSQL | ||
| BFS suffix-stripping stemmer for Kazakh with vowel harmony, | ||
| penalty scoring, lexicon verification, and stem repair. | ||
| CTRL | ||
| sed -i 's/^ //' ${PKG_DIR}/DEBIAN/control | ||
| cp -a ${PGRX_OUT}/* ${PKG_DIR}/ | ||
| SHAREDIR=$(pg_config --sharedir) | ||
| mkdir -p "${PKG_DIR}${SHAREDIR}/tsearch_data" | ||
| cp data/tsearch_data/kaz_stems.dict "${PKG_DIR}${SHAREDIR}/tsearch_data/" | ||
| cp data/tsearch_data/kaz_stopwords.stop "${PKG_DIR}${SHAREDIR}/tsearch_data/" | ||
| dpkg-deb --build --root-owner-group ${PKG_DIR} | ||
| echo "DEB_FILE=${PKG_DIR}.deb" >> $GITHUB_ENV | ||
| - uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: deb-pg${{ matrix.pg }} | ||
| path: ${{ env.DEB_FILE }} | ||
| release: | ||
| name: GitHub Release | ||
| needs: build-deb | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/download-artifact@v4 | ||
| with: | ||
| path: artifacts | ||
| merge-multiple: true | ||
| - name: Create GitHub Release | ||
| env: | ||
| GH_TOKEN: ${{ github.token }} | ||
| run: | | ||
| gh release create ${{ github.ref_name }} \ | ||
| --title "pg_kazsearch ${{ github.ref_name }}" \ | ||
| --generate-notes \ | ||
| artifacts/*.deb | ||
| docker: | ||
| name: Docker / PG ${{ matrix.pg }} | ||
| needs: build-deb | ||
| runs-on: ubuntu-latest | ||
| strategy: | ||
| matrix: | ||
| pg: [16, 17, 18] | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: docker/login-action@v3 | ||
| with: | ||
| registry: ghcr.io | ||
| username: ${{ github.actor }} | ||
| password: ${{ secrets.GITHUB_TOKEN }} | ||
| - uses: docker/setup-buildx-action@v3 | ||
| - uses: actions/download-artifact@v4 | ||
| with: | ||
| pattern: deb-pg${{ matrix.pg }} | ||
| path: debs | ||
| merge-multiple: true | ||
| - name: Build and push image | ||
| uses: docker/build-push-action@v6 | ||
| with: | ||
| context: . | ||
| file: docker/Dockerfile.release | ||
| build-args: | | ||
| PG_MAJOR=${{ matrix.pg }} | ||
| push: true | ||
| platforms: linux/amd64 | ||
| tags: | | ||
| ghcr.io/${{ github.repository }}:${{ matrix.pg }}-${{ github.ref_name }} | ||
| ghcr.io/${{ github.repository }}:${{ matrix.pg }} | ||
| ${{ matrix.pg == '18' && format('ghcr.io/{0}:latest', github.repository) || '' }} | ||
| pgxn: | ||
| name: Publish to PGXN | ||
| needs: build-deb | ||
| if: secrets.PGXN_USERNAME != '' | ||
| runs-on: ubuntu-latest | ||
| container: pgxn/pgxn-tools | ||
| env: | ||
| PGXN_USERNAME: ${{ secrets.PGXN_USERNAME }} | ||
| PGXN_PASSWORD: ${{ secrets.PGXN_PASSWORD }} | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Generate META.json | ||
| run: | | ||
| version=${GITHUB_REF_NAME#v} | ||
| sed "s/@PGXN_VERSION@/${version}/g" META.json.in > META.json | ||
| - name: Bundle and publish | ||
| env: | ||
| GIT_BUNDLE_OPTS: --add-file META.json | ||
| run: pgxn-bundle && pgxn-release | ||
