Skip to content
This repository was archived by the owner on Feb 24, 2025. It is now read-only.

Commit 16b6645

Browse files
ayoyayoy
committed
Add build_hotfix_release
1 parent f3eec6c commit 16b6645

File tree

2 files changed

+132
-0
lines changed

2 files changed

+132
-0
lines changed

‎.github/actions/asana-add-comment/templates/hotfix-branch-ready.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
data:
2+
html_text: |
3+
<body>
4+
<h2>Hotfix release branch ${BRANCH} is ready</h2>
5+
<a data-asana-gid='${ASSIGNEE_ID}'/>, please follow up with having code merged to <code>${BRANCH}</code> and making a release build.</a>.
6+
7+
8+
🔗 Workflow URL: <a href='${WORKFLOW_URL}'>${WORKFLOW_URL}</a>.
9+
</body>

‎.github/workflows/build_hotfix_release.yml

Lines changed: 123 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,123 @@
1+
name: Build Hotfix Release
2+
3+
on:
4+
push:
5+
workflow_dispatch:
6+
inputs:
7+
asana-task-url:
8+
description: "Asana release task URL"
9+
required: true
10+
type: string
11+
base-branch:
12+
description: "Base branch (defaults to main, only override for testing)"
13+
required: false
14+
type: string
15+
current-internal-release-branch:
16+
description: "Current internal release branch (to merge hotfix branch to - hotfix branch is merged to main if this is not provided)"
17+
required: false
18+
type: string
19+
20+
jobs:
21+
22+
assert_release_branch:
23+
24+
name: Assert Hotfix Branch
25+
26+
runs-on: ubuntu-latest
27+
timeout-minutes: 10
28+
29+
steps:
30+
31+
- name: Assert hotfix release branch
32+
run: |
33+
case "${{ github.ref }}" in
34+
refs/heads/hotfix/*) ;;
35+
*) echo "👎 Not a hotfix release branch"; exit 1 ;;
36+
esac
37+
38+
run_tests:
39+
40+
name: Run Tests
41+
42+
needs: assert_release_branch
43+
uses: ./.github/workflows/pr.yml
44+
secrets:
45+
ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }}
46+
47+
update_asana:
48+
49+
name: Update Asana tasks
50+
51+
needs: run_tests
52+
runs-on: macos-13-xlarge
53+
timeout-minutes: 10
54+
55+
steps:
56+
57+
- name: Check out the code
58+
uses: actions/checkout@v4
59+
with:
60+
fetch-depth: 0 # Fetch all history and tags in order to extract Asana task URLs from git log
61+
ref: ${{ github.ref_name }}
62+
submodules: recursive
63+
64+
- name: Extract Asana Task ID
65+
id: task-id
66+
uses: ./.github/actions/asana-extract-task-id
67+
with:
68+
task-url: ${{ github.event.inputs.asana-task-url }}
69+
70+
- name: Update Asana tasks for the release
71+
env:
72+
ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }}
73+
GH_TOKEN: ${{ github.token }}
74+
BRANCH: ${{ github.ref_name }}
75+
run: |
76+
version="$(cut -d '/' -f 2 <<< "$BRANCH")"
77+
./scripts/update_asana_for_release.sh internal ${{ steps.task-id.outputs.task-id }} ${{ vars.MACOS_APP_BOARD_VALIDATION_SECTION_ID }} "${version}"
78+
79+
prepare_release:
80+
name: Prepare Release
81+
needs: run_tests
82+
uses: ./.github/workflows/release.yml
83+
with:
84+
asana-task-url: ${{ github.event.inputs.asana-task-url }}
85+
secrets:
86+
BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
87+
P12_PASSWORD: ${{ secrets.P12_PASSWORD }}
88+
KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
89+
REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.REVIEW_PROVISION_PROFILE_BASE64 }}
90+
RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.RELEASE_PROVISION_PROFILE_BASE64 }}
91+
DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_RELEASE_PROVISION_PROFILE_BASE64 }}
92+
DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.DBP_AGENT_REVIEW_PROVISION_PROFILE_BASE64 }}
93+
NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2: ${{ secrets.NETP_SYSEX_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
94+
NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2: ${{ secrets.NETP_SYSEX_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
95+
NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2: ${{ secrets.NETP_AGENT_RELEASE_PROVISION_PROFILE_BASE64_V2 }}
96+
NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2: ${{ secrets.NETP_AGENT_REVIEW_PROVISION_PROFILE_BASE64_V2 }}
97+
NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_RELEASE_PROVISION_PROFILE_BASE64 }}
98+
NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64: ${{ secrets.NETP_NOTIFICATIONS_REVIEW_PROVISION_PROFILE_BASE64 }}
99+
APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }}
100+
APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
101+
APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }}
102+
ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }}
103+
MM_HANDLES_BASE64: ${{ secrets.MM_HANDLES_BASE64 }}
104+
MM_WEBHOOK_URL: ${{ secrets.MM_WEBHOOK_URL }}
105+
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
106+
AWS_ACCESS_KEY_ID_RELEASE_S3: ${{ secrets.AWS_ACCESS_KEY_ID_RELEASE_S3 }}
107+
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
108+
AWS_SECRET_ACCESS_KEY_RELEASE_S3: ${{ secrets.AWS_SECRET_ACCESS_KEY_RELEASE_S3 }}
109+
MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
110+
SSH_PRIVATE_KEY_FASTLANE_MATCH: ${{ secrets.SSH_PRIVATE_KEY_FASTLANE_MATCH }}
111+
112+
tag_and_merge:
113+
name: Tag and Merge Branch
114+
needs: [ prepare_release, update_asana ]
115+
uses: ./.github/workflows/tag_release.yml
116+
with:
117+
asana-task-url: ${{ github.event.inputs.asana-task-url }}
118+
branch: ${{ github.ref_name }}
119+
base-branch: ${{ github.event.inputs.current-internal-release-branch || 'main' }}
120+
prerelease: true
121+
secrets:
122+
ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }}
123+
GHA_ELEVATED_PERMISSIONS_TOKEN: ${{ secrets.GHA_ELEVATED_PERMISSIONS_TOKEN }}

0 commit comments

Comments
 (0)