diff --git a/.github/workflows/letro-release.yml b/.github/workflows/letro-release.yml new file mode 100644 index 000000000..d097db693 --- /dev/null +++ b/.github/workflows/letro-release.yml @@ -0,0 +1,92 @@ +name: Letro Release + +on: + push: + tags: + - "release/letro-v*.*.*" + +permissions: + contents: write + +jobs: + create-release: + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Extract version from tag + id: version + run: | + # Extract version from tag (release/letro-v1.2.3 -> letro-v1.2.3) + TAG_NAME=${GITHUB_REF#refs/tags/release/} + echo "tag_name=$TAG_NAME" >> $GITHUB_OUTPUT + echo "Version: $TAG_NAME" + + - name: Generate SBOM with Trivy + uses: aquasecurity/trivy-action@master + with: + scan-type: 'fs' + format: 'cyclonedx' + output: 'sbom.json' + + - name: Get current timestamp + id: timestamp + run: echo "date=$(date -u +'%Y-%m-%d %H:%M')" >> $GITHUB_OUTPUT + + - name: Create GitHub Release + id: create_release + uses: actions/create-release@v1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + tag_name: ${{ github.ref_name }} + release_name: ${{ steps.version.outputs.tag_name }} + draft: false + prerelease: false + body: | + This release has been automatically published from the internal repository. + + **Version:** ${{ steps.version.outputs.tag_name }} + **Published:** ${{ steps.timestamp.outputs.date }} UTC + + > This is an official release. For questions or support, please contact the maintainers. + + - name: Upload SBOM to Release + uses: actions/upload-release-asset@v1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + upload_url: ${{ steps.create_release.outputs.upload_url }} + asset_path: ./sbom.json + asset_name: sbom.json + asset_content_type: application/json + + - name: Upload FORK_DIVERGENCE to Release + uses: actions/upload-release-asset@v1 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + with: + upload_url: ${{ steps.create_release.outputs.upload_url }} + asset_path: ./FORK_DIVERGENCE.md + asset_name: FORK_DIVERGENCE.md + asset_content_type: text/markdown + + - name: Trigger sync to public repository + uses: actions/github-script@v7 + with: + github-token: ${{ secrets.LETRO_WORKFLOW_BOT }} + script: | + await github.rest.actions.createWorkflowDispatch({ + owner: 'p-num', + repo: 'letro-public-sync', + workflow_id: 'sync-element-x-ios.yml', + ref: 'main', + inputs: { + version: '${{ steps.version.outputs.tag_name }}' + } + }); + console.log('Triggered sync workflow for version ${{ steps.version.outputs.tag_name }}');