.github/workflows/release.yml - master - githubmirror/sssd

.github/workflows/release.yml
74 строки2 KB
dependabot[bot]
ci: bump actions/checkout from 6 to 7
02 июл 2026, 17:47
02 июл 2026, 17:470ac0e28
name: "release"
on:
  workflow_dispatch:
    inputs:
      branch:
        description: 'Target branch to release from'
        required: true
        default: 'master'
        type: string
      version:
        description: 'Release version'
        required: true
        type: string
      create_stable_branch:
        description: 'Create stable branch (auto = yes if branch is master)'
        required: true
        default: 'auto'
        type: choice
        options:
          - auto
          - 'no'
jobs:
  release:
    runs-on: ubuntu-latest
    container: quay.io/sssd/ci-client-devel:latest
    permissions:
      contents: read
    steps:
    - name: Checkout repository
      uses: actions/checkout@v7
      with:
        path: sssd
        # Fetch full history and all tags so we can find previous
        # version tags.
        fetch-depth: 0
        fetch-tags: true

    - name: Import GPG key
      uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
      with:
        gpg_private_key: ${{ secrets.GPG_KEY }}
        passphrase: ${{ secrets.GPG_PASSPHRASE }}
        git_config_global: true
        git_user_signingkey: true
        git_tag_gpgsign: true
        git_commit_gpgsign: true
        git_committer_name: sssd-bot
        git_committer_email: sssd-maintainers@lists.fedoraproject.org

    - name: Install dependencies
      uses: ./sssd/.github/actions/install-dependencies
      with:
        working-directory: sssd

    - name: Install release notes dependencies
      shell: bash
      run: dnf install -y jq pandoc python3-pypandoc

    - name: Execute release script
      working-directory: sssd
      shell: bash
      env:
        GH_TOKEN: ${{ secrets.BOT_TOKEN }}
      run: |
        ./scripts/release.sh "${{ inputs.branch }}" "${{ inputs.version }}" "${{ inputs.create_stable_branch }}"

    - name: Execute release notes script
      working-directory: sssd
      shell: bash
      env:
        GH_TOKEN: ${{ secrets.BOT_TOKEN }}
      run: |
        # Release notes file is generated from the release script
        ./scripts/release-notes.sh "${{ inputs.version }}" "/tmp/sssd-${{ inputs.version }}.rst" sssd-bot