name: Build, Test, Publish and Release

on:

push:

branches: [ master ]

workflow_dispatch:

# Add workflow-level permissions

permissions:

contents: write

packages: read

jobs:

build-test-publish:

runs-on: ubuntu-22.04

services:

postgres:

image: postgres:17

env:

POSTGRES_USER: postgres

POSTGRES_PASSWORD: postgres

POSTGRES_DB: postgres

ports:

- 5432:5432

options: >-

--health-cmd pg_isready

--health-interval 10s

--health-timeout 5s

--health-retries 5

steps:

- uses: actions/checkout@v4 # Updated from v2

- name: Setup .NET10

uses: actions/setup-dotnet@v4

with:

dotnet-version: 10.0.x

- name: Install dependencies

run: dotnet restore

- name: Build

run: dotnet build --configuration Release --no-restore

- name: Test

run: dotnet test --no-restore --verbosity m

- name: Publish

run: dotnet nuget push **\*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{secrets.NUGET_API_KEY}} --skip-duplicate

create-release:

needs: build-test-publish

runs-on: ubuntu-22.04

# Explicit permissions for this job

permissions:

contents: write

outputs:

upload_url: ${{ steps.create_release.outputs.upload_url }}

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Set release version from version.txt

run: echo "RELEASE_VERSION=v$(cat version.txt)" >> "$GITHUB_ENV"

- name: Extract changelog for this version

id: changelog

run: |

# Per-version changelog files live under changelog/v<X.Y.Z>.md.

# Strip the "v" prefix from RELEASE_VERSION (e.g. "v3.15.1" -> "3.15.1") and read that file.

VERSION_NUM="${RELEASE_VERSION#v}"

VERSION_FILE="changelog/v${VERSION_NUM}.md"

if [ -f "$VERSION_FILE" ]; then

# Skip the leading "# Changelog vX.Y.Z (date)" title line

CHANGELOG=$(tail -n +2 "$VERSION_FILE")

else

CHANGELOG="See [full changelog](https://github.com/NpgsqlRest/NpgsqlRest/blob/master/changelog/) for details."

fi

echo "$CHANGELOG" > release_notes.md

env:

RELEASE_VERSION: ${{ env.RELEASE_VERSION }}

- name: Create Release

id: create_release

uses: actions/create-release@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

tag_name: ${{ env.RELEASE_VERSION }}

release_name: "NpgsqlRest ${{ env.RELEASE_VERSION }}"

body_path: release_notes.md

draft: false

prerelease: false

upload-assets:

needs: create-release

runs-on: ubuntu-22.04

# Explicit permissions for this job

permissions:

contents: write

steps:

- name: Checkout code

uses: actions/checkout@v4 # Updated from v2

- name: Upload appsettings.json to release

uses: actions/upload-release-asset@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

upload_url: ${{ needs.create-release.outputs.upload_url }}

asset_path: ./NpgsqlRestClient/appsettings.json

asset_name: appsettings.json

asset_content_type: application/json

build-windows:

needs: create-release

runs-on: windows-2022

permissions:

contents: write

steps:

- uses: actions/checkout@v4

- name: Setup .NET10

uses: actions/setup-dotnet@v4

with:

dotnet-version: 10.0.x

- name: Build Windows AOT

run: dotnet publish ./NpgsqlRestClient/NpgsqlRestClient.csproj -r win-x64 -c Release

- name: Upload Windows executable

uses: actions/upload-release-asset@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

upload_url: ${{ needs.create-release.outputs.upload_url }}

asset_path: ./NpgsqlRestClient/bin/Release/net10.0/win-x64/publish/NpgsqlRestClient.exe

asset_name: npgsqlrest-win64.exe

asset_content_type: application/octet-stream

build-linux:

needs: create-release

runs-on: ubuntu-22.04

permissions:

contents: write

services:

postgres:

image: postgres:17

env:

POSTGRES_USER: postgres

POSTGRES_PASSWORD: postgres

POSTGRES_DB: postgres

ports:

- 5432:5432

options: >-

--health-cmd pg_isready

--health-interval 10s

--health-timeout 5s

--health-retries 5

steps:

- uses: actions/checkout@v4

- name: Setup .NET10

uses: actions/setup-dotnet@v4

with:

dotnet-version: 10.0.x

- name: Build Linux AOT

run: dotnet publish ./NpgsqlRestClient/NpgsqlRestClient.csproj -r linux-x64 -c Release

- name: AOT smoke test (config validation + database connection)

run: |

cat > smoke.appsettings.json <<'SMOKE'

{

"ConnectionStrings": {

"Default": "Host=localhost;Port=5432;Database=postgres;Username=postgres;Password=postgres"

}

}

SMOKE

BIN=./NpgsqlRestClient/bin/Release/net10.0/linux-x64/publish/NpgsqlRestClient

"$BIN" --version

"$BIN" smoke.appsettings.json --validate

- name: Upload Linux executable

uses: actions/upload-release-asset@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

upload_url: ${{ needs.create-release.outputs.upload_url }}

asset_path: ./NpgsqlRestClient/bin/Release/net10.0/linux-x64/publish/NpgsqlRestClient

asset_name: npgsqlrest-linux64

asset_content_type: application/octet-stream

- name: Upload Linux executable artifact

uses: actions/upload-artifact@v4

with:

name: npgsqlrest-linux64

path: ./NpgsqlRestClient/bin/Release/net10.0/linux-x64/publish/NpgsqlRestClient

build-linux-arm:

needs: create-release

runs-on: ubuntu-22.04-arm

permissions:

contents: write

steps:

- uses: actions/checkout@v4

- name: Setup .NET10

uses: actions/setup-dotnet@v4

with:

dotnet-version: 10.0.x

- name: Build Linux ARM64 AOT

run: dotnet publish ./NpgsqlRestClient/NpgsqlRestClient.csproj -r linux-arm64 -c Release

- name: Upload Linux ARM64 executable

uses: actions/upload-release-asset@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

upload_url: ${{ needs.create-release.outputs.upload_url }}

asset_path: ./NpgsqlRestClient/bin/Release/net10.0/linux-arm64/publish/NpgsqlRestClient

asset_name: npgsqlrest-linux-arm64

asset_content_type: application/octet-stream

- name: Upload Linux ARM64 executable artifact

uses: actions/upload-artifact@v4

with:

name: npgsqlrest-linux-arm64

path: ./NpgsqlRestClient/bin/Release/net10.0/linux-arm64/publish/NpgsqlRestClient

build-macos:

needs: create-release

runs-on: macos-latest

permissions:

contents: write

steps:

- uses: actions/checkout@v4

- name: Setup .NET10

uses: actions/setup-dotnet@v4

with:

dotnet-version: 10.0.x

- name: Build macOS ARM64 AOT

run: dotnet publish ./NpgsqlRestClient/NpgsqlRestClient.csproj -r osx-arm64 -c Release

- name: Upload macOS executable

uses: actions/upload-release-asset@v1

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

with:

upload_url: ${{ needs.create-release.outputs.upload_url }}

asset_path: ./NpgsqlRestClient/bin/Release/net10.0/osx-arm64/publish/NpgsqlRestClient

asset_name: npgsqlrest-osx-arm64

asset_content_type: application/octet-stream

build-docker-aot:

needs: build-linux

runs-on: ubuntu-22.04

permissions:

contents: read

packages: write

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Set release version from version.txt

run: echo "RELEASE_VERSION=v$(cat version.txt)" >> "$GITHUB_ENV"

- name: Download Linux executable artifact

uses: actions/download-artifact@v4

with:

name: npgsqlrest-linux64

path: ./docker

- name: Make executable

run: chmod +x ./docker/NpgsqlRestClient

- name: Set up Docker Buildx

uses: docker/setup-buildx-action@v3

- name: Login to Docker Hub

uses: docker/login-action@v3

with:

username: ${{ secrets.DOCKER_HUB_USERNAME }}

password: ${{ secrets.DOCKER_HUB_TOKEN }}

- name: Build and push AOT Docker image

uses: docker/build-push-action@v5

with:

context: ./docker

file: ./docker/Dockerfile

push: true

platforms: linux/amd64

provenance: false

tags: |

vbilopav/npgsqlrest:${{ env.RELEASE_VERSION }}

vbilopav/npgsqlrest:${{ env.RELEASE_VERSION }}-aot

vbilopav/npgsqlrest:latest

vbilopav/npgsqlrest:latest-aot

build-docker-jit:

needs: create-release

runs-on: ubuntu-22.04

permissions:

contents: read

packages: write

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Set release version from version.txt

run: echo "RELEASE_VERSION=v$(cat version.txt)" >> "$GITHUB_ENV"

- name: Set up Docker Buildx

uses: docker/setup-buildx-action@v3

- name: Login to Docker Hub

uses: docker/login-action@v3

with:

username: ${{ secrets.DOCKER_HUB_USERNAME }}

password: ${{ secrets.DOCKER_HUB_TOKEN }}

- name: Build and push JIT Docker image

uses: docker/build-push-action@v5

with:

context: .

file: ./docker/Dockerfile.jit

push: true

platforms: linux/amd64

provenance: false

tags: |

vbilopav/npgsqlrest:${{ env.RELEASE_VERSION }}-jit

vbilopav/npgsqlrest:latest-jit

build-docker-arm:

needs: build-linux-arm

runs-on: ubuntu-22.04

permissions:

contents: read

packages: write

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Set release version from version.txt

run: echo "RELEASE_VERSION=v$(cat version.txt)" >> "$GITHUB_ENV"

- name: Download Linux ARM64 executable artifact

uses: actions/download-artifact@v4

with:

name: npgsqlrest-linux-arm64

path: ./docker

- name: Make executable

run: chmod +x ./docker/NpgsqlRestClient

- name: Set up Docker Buildx

uses: docker/setup-buildx-action@v3

- name: Set up QEMU

uses: docker/setup-qemu-action@v3

- name: Login to Docker Hub

uses: docker/login-action@v3

with:

username: ${{ secrets.DOCKER_HUB_USERNAME }}

password: ${{ secrets.DOCKER_HUB_TOKEN }}

- name: Build and push ARM Docker image

uses: docker/build-push-action@v5

with:

context: ./docker

file: ./docker/Dockerfile.arm

push: true

platforms: linux/arm64

provenance: false

tags: |

vbilopav/npgsqlrest:${{ env.RELEASE_VERSION }}-arm

vbilopav/npgsqlrest:latest-arm

build-docker-bun:

needs: build-linux

runs-on: ubuntu-22.04

permissions:

contents: read

packages: write

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Set release version from version.txt

run: echo "RELEASE_VERSION=v$(cat version.txt)" >> "$GITHUB_ENV"

- name: Download Linux executable artifact

uses: actions/download-artifact@v4

with:

name: npgsqlrest-linux64

path: ./docker

- name: Make executable

run: chmod +x ./docker/NpgsqlRestClient

- name: Set up Docker Buildx

uses: docker/setup-buildx-action@v3

- name: Login to Docker Hub

uses: docker/login-action@v3

with:

username: ${{ secrets.DOCKER_HUB_USERNAME }}

password: ${{ secrets.DOCKER_HUB_TOKEN }}

- name: Build and push Bun Docker image

uses: docker/build-push-action@v5

with:

context: ./docker

file: ./docker/Dockerfile.bun

push: true

platforms: linux/amd64

provenance: false

tags: |

vbilopav/npgsqlrest:${{ env.RELEASE_VERSION }}-bun

vbilopav/npgsqlrest:latest-bun

npm-publish:

needs: create-release

runs-on: ubuntu-22.04

permissions:

contents: read

id-token: write # Required for NPM OIDC trusted publishing

steps:

- name: Checkout code

uses: actions/checkout@v4

- name: Setup Node.js

uses: actions/setup-node@v4

with:

node-version: '24'

- name: Sync npm package version from version.txt

run: cd npm && npm version "$(cat ../version.txt)" --no-git-tag-version --allow-same-version

- name: Publish to npm with OIDC

uses: JS-DevTools/npm-publish@v4

with:

package: ./npm/package.json

access: public

provenance: true