Merge pull request #8 from awnion/release-workflow-v2

rework release workflow

Author: awnion

.github/workflows/fork-release.yaml

@@ -0,0 +1,104 @@
+name: Fork release
+
+on:
+  push:
+    branches: [main]
+    paths: [private-build-plans.toml]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  packages: write
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE: ghcr.io/${{ github.repository }}
+  FONT_NAME: afio
+
+jobs:
+  build:
+    if: github.repository != 'awnion/custom-iosevka-nerd-font'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: docker/setup-buildx-action@v4
+
+      - uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - id: sha
+        run: echo "short=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+
+      - id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=raw,value=sha-${{ steps.sha.outputs.short }}
+
+      - uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Build font
+        env:
+          IMAGE_REF: ${{ env.IMAGE }}:sha-${{ steps.sha.outputs.short }}
+        run: ./build.sh
+
+      - name: Create or update latest pre-release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          mv _output/${FONT_NAME}-*.zip "_output/${FONT_NAME}-latest.zip"
+
+          gh release create latest \
+            "_output/${FONT_NAME}-latest.zip" \
+            -R "${{ github.repository }}" \
+            --prerelease \
+            --title "Latest build" \
+            --notes "$(cat <<'NOTES'
+          ## Install latest build
+
+          ### Download
+
+          ```bash
+          curl -fsSLO https://github.com/${{ github.repository }}/releases/download/latest/${FONT_NAME}-latest.zip
+          ```
+
+          ### Install (macOS)
+
+          ```bash
+          curl -fsSLO https://github.com/${{ github.repository }}/releases/download/latest/${FONT_NAME}-latest.zip
+          unzip -o ${FONT_NAME}-latest.zip -d ~/Library/Fonts/
+          ```
+
+          ### Install (Linux)
+
+          ```bash
+          curl -fsSLO https://github.com/${{ github.repository }}/releases/download/latest/${FONT_NAME}-latest.zip
+          mkdir -p ~/.local/share/fonts
+          unzip -o ${FONT_NAME}-latest.zip -d ~/.local/share/fonts/
+          fc-cache -fv
+          ```
+
+          ---
+
+          > This is an automated pre-release from the latest commit on `main`.
+          > For stable versions, see [tagged releases](https://github.com/${{ github.repository }}/releases).
+          NOTES
+          )" 2>/dev/null || \
+          gh release upload latest \
+            "_output/${FONT_NAME}-latest.zip" \
+            -R "${{ github.repository }}" \
+            --clobber

.github/workflows/pr.yaml

@@ -8,7 +8,7 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
-  contents: read
+  contents: write
   packages: write
 
 env:
@@ -17,6 +17,33 @@ env:
   FONT_NAME: afio
 
 jobs:
+  rc-checks:
+    if: startsWith(github.head_ref, 'v') && endsWith(github.head_ref, '-rc')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Validate VERSION matches branch
+        run: |
+          VERSION=$(cat VERSION | tr -d '[:space:]')
+          BRANCH="${{ github.head_ref }}"
+          EXPECTED="v${VERSION}-rc"
+          if [ "$BRANCH" != "$EXPECTED" ]; then
+            echo "::error::VERSION file (${VERSION}) does not match branch ${BRANCH} (expected ${EXPECTED})"
+            exit 1
+          fi
+
+      - name: Check release notes in PR description
+        env:
+          PR_BODY: ${{ github.event.pull_request.body }}
+        run: |
+          if [ -z "$PR_BODY" ]; then
+            echo "::error::PR description is required for RC branches (used as release notes)"
+            exit 1
+          fi
+
   build-image:
     runs-on: ubuntu-latest
     outputs:
@@ -140,3 +167,44 @@ jobs:
         with:
           name: visual-generated
           path: _generated/*.png
+
+  prerelease:
+    if: startsWith(github.head_ref, 'v') && endsWith(github.head_ref, '-rc')
+    needs: [rc-checks, visual-check]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Extract version
+        run: |
+          VERSION=$(cat VERSION | tr -d '[:space:]')
+          echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
+
+      - name: Download font artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: font-build
+          path: _output
+
+      - name: Create pre-release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SHA: ${{ github.event.pull_request.head.sha }}
+          PR_BODY: ${{ github.event.pull_request.body }}
+        run: |
+          RC_TAG="v${VERSION}-rc.${{ github.run_number }}"
+
+          mv _output/${FONT_NAME}-*.zip "_output/${FONT_NAME}-${RC_TAG}.zip"
+
+          gh api "repos/${{ github.repository }}/git/refs" \
+            -f ref="refs/tags/${RC_TAG}" \
+            -f sha="${SHA}"
+
+          gh release create "$RC_TAG" \
+            "_output/${FONT_NAME}-${RC_TAG}.zip" \
+            -R "${{ github.repository }}" \
+            --prerelease \
+            --title "$RC_TAG" \
+            --notes "$PR_BODY"