upgrade dependencies (#425) #150
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: roapi release | |
| on: | |
| push: | |
| paths: | |
| - '.github/workflows/roapi_release.yml' | |
| - 'columnq/**' | |
| - 'roapi/**' | |
| - 'Cargo.lock' | |
| branches: [ main ] | |
| tags: [ 'roapi-v*' ] | |
| env: | |
| # NOTE: the version is also defined in build.yml and Dockerfile | |
| RUST_TC_VER: "1.94.0" | |
| jobs: | |
| validate-release-tag: | |
| name: Validate git tag | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| - name: compare git tag with cargo metadata | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| run: | | |
| PUSHED_TAG=${GITHUB_REF##*/} | |
| CURR_VER=$( grep version roapi/Cargo.toml | head -n 1 | awk '{print $3}' | tr -d '"' ) | |
| if [[ "${PUSHED_TAG}" != "roapi-v${CURR_VER}" ]]; then | |
| echo "Cargo metadata has version set to ${CURR_VER}, but got pushed tag ${PUSHED_TAG}." | |
| exit 1 | |
| fi | |
| - name: skip git tag validation | |
| if: "! startsWith(github.ref, 'refs/tags/')" | |
| run: echo "skip tag version validation on non-release branch run" | |
| macos: | |
| needs: validate-release-tag | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.10" | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@v1 | |
| with: | |
| toolchain: ${{ env.RUST_TC_VER }} | |
| target: aarch64-apple-darwin,x86_64-apple-darwin,wasm32-unknown-unknown | |
| - uses: taiki-e/install-action@v2 | |
| with: | |
| tool: trunk | |
| - name: Install maturin | |
| run: pip3 install 'maturin<2' | |
| - name: Build UI first | |
| run: | | |
| cd roapi-ui | |
| trunk build --release --locked | |
| - name: Build wheels - x86_64 | |
| run: | | |
| maturin build -m roapi/Cargo.toml -b bin --target x86_64-apple-darwin --release --out dist --features=database-sqlite,ui | |
| - name: Build wheels - universal2 | |
| env: | |
| DEVELOPER_DIR: /Applications/Xcode.app/Contents/Developer | |
| MACOSX_DEPLOYMENT_TARGET: '10.12' | |
| run: | | |
| # set SDKROOT for C dependencies | |
| export SDKROOT=$(xcrun --sdk macosx --show-sdk-path) | |
| maturin build -m roapi/Cargo.toml -b bin --release --target universal2-apple-darwin --out dist --features=database-sqlite,ui | |
| pip install roapi --no-index --find-links dist --force-reinstall | |
| - name: Upload wheels | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: wheels-macos | |
| path: dist | |
| - name: Archive binary | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| run: tar czvf target/release/roapi.tar.gz -C target/release roapi | |
| - name: Upload binary to GitHub Release | |
| uses: svenstaro/upload-release-action@v2 | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| with: | |
| overwrite: true | |
| repo_token: ${{ secrets.GITHUB_TOKEN }} | |
| asset_name: roapi-apple-darwin.tar.gz | |
| file: target/release/roapi.tar.gz | |
| tag: ${{ github.ref }} | |
| windows: | |
| needs: validate-release-tag | |
| runs-on: windows-latest | |
| strategy: | |
| matrix: | |
| platform: [ | |
| { python-architecture: "x64", target: "x86_64-pc-windows-msvc", features: "database-sqlite" }, | |
| ] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.10" | |
| architecture: ${{ matrix.platform.python-architecture }} | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@v1 | |
| with: | |
| toolchain: ${{ env.RUST_TC_VER }} | |
| target: ${{ matrix.platform.target }},wasm32-unknown-unknown | |
| - uses: taiki-e/install-action@v2 | |
| with: | |
| tool: trunk | |
| - name: Install maturin | |
| run: pip3 install 'maturin<2' | |
| - name: Build UI first | |
| run: | | |
| cd roapi-ui | |
| trunk build --release --locked | |
| - name: Build wheels | |
| run: | | |
| maturin build -m roapi/Cargo.toml -b bin --release --out dist --target ${{ matrix.platform.target }} --features=${{ matrix.platform.features }},ui | |
| pip install roapi --no-index --find-links dist --force-reinstall | |
| roapi --help | |
| - name: Upload wheels | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: wheels-windows | |
| path: dist | |
| - name: Archive binary | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| run: | | |
| tar czvf target/release/roapi.tar.gz -C target/${{ matrix.platform.target }}/release roapi.exe | |
| - name: Upload binary to GitHub Release | |
| uses: svenstaro/upload-release-action@v2 | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| with: | |
| overwrite: true | |
| repo_token: ${{ secrets.GITHUB_TOKEN }} | |
| asset_name: roapi-windows.tar.gz | |
| file: target/release/roapi.tar.gz | |
| tag: ${{ github.ref }} | |
| linux: | |
| needs: validate-release-tag | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| platform: | |
| - manylinux: "2010" | |
| target: "x86_64-unknown-linux-musl" | |
| image_tag: "x86_64-musl" | |
| features: "rustls,database-sqlite" | |
| name_suffix: "" | |
| upload: "true" | |
| # - manylinux: "2010" | |
| # target: "x86_64-unknown-linux-musl" | |
| # image_tag: "x86_64-musl" | |
| # features: "native-tls" | |
| # name_suffix: "-openssl" | |
| # upload: "false" | |
| - manylinux: '2014' | |
| target: "aarch64-unknown-linux-musl" | |
| image_tag: "aarch64-musl" | |
| features: "rustls,database-sqlite" | |
| name_suffix: "" | |
| upload: "true" | |
| # - manylinux: '2014' | |
| # target: "aarch64-unknown-linux-musl" | |
| # image_tag: "aarch64-musl" | |
| # features: "native-tls" | |
| # name_suffix: "-openssl" | |
| # upload: "false" | |
| # - manylinux: '2014' | |
| # target: "armv7-unknown-linux-musleabihf" | |
| # image_tag: "armv7-musleabihf" | |
| # features: "rustls,database-sqlite" | |
| # name_suffix: "" | |
| # upload: "true" | |
| # - manylinux: '2014' | |
| # target: "armv7-unknown-linux-musleabihf" | |
| # image_tag: "armv7-musleabihf" | |
| # features: "native-tls" | |
| # name_suffix: "-openssl" | |
| # upload: "false" | |
| container: | |
| image: docker://messense/rust-musl-cross:${{ matrix.platform.image_tag }} | |
| env: | |
| RUSTUP_HOME: /root/.rustup | |
| CARGO_HOME: /root/.cargo | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust toolchain | |
| run: | | |
| rustup update ${{ env.RUST_TC_VER }} | |
| rustup target add \ | |
| --toolchain ${{ env.RUST_TC_VER }} \ | |
| ${{ matrix.platform.target }} | |
| rustup target add \ | |
| --toolchain ${{ env.RUST_TC_VER }} \ | |
| wasm32-unknown-unknown | |
| rustup default ${{ env.RUST_TC_VER }} | |
| - uses: taiki-e/install-action@v2 | |
| with: | |
| tool: trunk | |
| - name: Install build deps | |
| if: "contains(matrix.platform.name_suffix, 'openssl')" | |
| run: | | |
| apt-get update | |
| apt-get install -y libssl-dev | |
| - name: Build UI first | |
| run: | | |
| cd roapi-ui | |
| trunk build --release --locked | |
| - name: Build Wheels | |
| run: | | |
| sudo python3 -m pip install 'maturin<2' | |
| maturin build -m roapi/Cargo.toml -b bin --release -o dist \ | |
| --target ${{ matrix.platform.target }} --manylinux ${{ matrix.platform.manylinux }} \ | |
| --no-default-features --features=${{ matrix.platform.features }},ui | |
| - name: Upload wheels | |
| uses: actions/upload-artifact@v4 | |
| if: "matrix.platform.upload == 'true'" | |
| with: | |
| name: wheels-linux-${{ matrix.platform.manylinux }} | |
| path: dist | |
| - name: Archive binary | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| run: tar czvf target/release/roapi.tar.gz -C target/${{ matrix.platform.target }}/release roapi | |
| - name: Upload binary to GitHub Release | |
| uses: svenstaro/upload-release-action@v2 | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| with: | |
| overwrite: true | |
| repo_token: ${{ secrets.GITHUB_TOKEN }} | |
| asset_name: roapi-${{ matrix.platform.target }}${{ matrix.platform.name_suffix }}.tar.gz | |
| file: target/release/roapi.tar.gz | |
| tag: ${{ github.ref }} | |
| pypi_release: | |
| needs: [ validate-release-tag, linux, macos, windows ] | |
| name: PyPI Release | |
| runs-on: ubuntu-latest | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| steps: | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: wheels-linux-2010 | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: wheels-linux-2014 | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: wheels-macos | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: wheels-windows | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.10" | |
| - name: Publish to PyPi | |
| env: | |
| TWINE_USERNAME: __token__ | |
| TWINE_PASSWORD: ${{ secrets.ROAPI_PYPI_TOKEN }} | |
| run: | | |
| pip install --upgrade twine | |
| twine upload --skip-existing * | |
| docker_release: | |
| if: "startsWith(github.ref, 'refs/tags/')" | |
| needs: validate-release-tag | |
| name: Docker Image Release | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # buildx setup required for build cache export | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Log in to the Container registry | |
| uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Extract metadata (tags, labels) for Docker | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| flavor: | | |
| latest=true | |
| tags: | | |
| type=match,pattern=roapi-(v.+),group=1 | |
| images: ghcr.io/${{ github.repository_owner }}/roapi | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| cache-from: type=registry,ref=ghcr.io/${{ github.repository_owner }}/roapi:buildcache | |
| cache-to: type=registry,ref=ghcr.io/${{ github.repository_owner }}/roapi:buildcache,mode=max |