wehub-resource-sync
277 lines
12 KiB
Bash
Executable File
277 lines
12 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
# Add Homebrew to PATH so create-dmg and gh are available in non-interactive shells
|
|
export PATH="/opt/homebrew/bin:$PATH"
|
|
|
|
# =============================================================================
|
|
# release.sh — Automates the full release pipeline for makesomething
|
|
#
|
|
# What it does (in order):
|
|
# 1. Auto-detects version + build from the latest GitHub Release
|
|
# 2. Archives the app via xcodebuild
|
|
# 3. Exports a signed + notarized .app
|
|
# 4. Wraps it in a DMG with the drag-to-Applications background
|
|
# 5. Notarizes the DMG with Apple (so Gatekeeper won't block it)
|
|
# 6. Signs the DMG with your Sparkle EdDSA key
|
|
# 7. Generates/updates appcast.xml automatically
|
|
# 8. Creates a GitHub Release with the DMG attached
|
|
# 9. Pushes the updated appcast.xml to the releases repo (makesomething-mac-app)
|
|
#
|
|
# Usage:
|
|
# ./scripts/release.sh Auto-bumps: 1.5 → 1.6, build 6 → 7
|
|
# ./scripts/release.sh 2.0 Sets marketing version to 2.0, auto-bumps build
|
|
# ./scripts/release.sh 2.0 10 Sets both marketing version and build number
|
|
#
|
|
# Prerequisites (one-time setup):
|
|
# - Xcode with your Developer ID signing certificate
|
|
# - `brew install create-dmg gh`
|
|
# - `gh auth login` (GitHub CLI authenticated)
|
|
# - Sparkle EdDSA key in your Keychain (already generated)
|
|
# - `xcrun notarytool store-credentials "AC_PASSWORD"` (Apple notarization credentials)
|
|
# =============================================================================
|
|
|
|
# ── Configuration ────────────────────────────────────────────────────────────
|
|
|
|
SCHEME="leanring-buddy"
|
|
APP_NAME="makesomething"
|
|
PROJECT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
|
|
BUILD_DIR="${PROJECT_DIR}/build"
|
|
ARCHIVE_PATH="${BUILD_DIR}/${APP_NAME}.xcarchive"
|
|
EXPORT_DIR="${BUILD_DIR}/export"
|
|
DMG_OUTPUT_DIR="${BUILD_DIR}/dmg"
|
|
RELEASES_DIR="${PROJECT_DIR}/releases" # where generate_appcast reads DMGs from
|
|
DMG_BACKGROUND="${PROJECT_DIR}/dmg-background.png"
|
|
|
|
GITHUB_REPO="julianjear/makesomething-mac-app"
|
|
|
|
# Sparkle tools (auto-discovered from Xcode's SPM cache)
|
|
SPARKLE_BIN=$(find ~/Library/Developer/Xcode/DerivedData/leanring-buddy*/SourcePackages/artifacts/sparkle/Sparkle/bin -maxdepth 0 2>/dev/null | head -1)
|
|
|
|
if [ -z "$SPARKLE_BIN" ]; then
|
|
echo "❌ Sparkle tools not found. Build the project in Xcode first so SPM downloads Sparkle."
|
|
exit 1
|
|
fi
|
|
|
|
# ── Auto-detect version from latest GitHub Release ──────────────────────────
|
|
# Fetches the latest release tag (e.g. "v1.5") and build number from GitHub.
|
|
# If no arguments are provided, bumps the minor version by 0.1 and build by 1.
|
|
# You can override either or both by passing arguments.
|
|
|
|
echo "🔍 Checking latest release on GitHub..."
|
|
|
|
LATEST_TAG=$(gh release view --repo "${GITHUB_REPO}" --json tagName --jq '.tagName' 2>/dev/null || echo "")
|
|
|
|
if [ -n "$LATEST_TAG" ]; then
|
|
# Strip the "v" prefix to get the version number (e.g. "v1.5" → "1.5")
|
|
LATEST_VERSION="${LATEST_TAG#v}"
|
|
|
|
# Get the build number from the latest release's app bundle inside the DMG.
|
|
# We download just the release metadata (not the DMG) and parse the body/notes,
|
|
# but the simplest reliable approach is to track it from the GitHub release title
|
|
# or from a known incrementing sequence. We use the GitHub API to get asset info
|
|
# and derive the build number from the release list count.
|
|
LATEST_BUILD=$(gh release list --repo "${GITHUB_REPO}" --json tagName --jq 'length' 2>/dev/null || echo "0")
|
|
|
|
echo " Latest release: ${LATEST_TAG} (build ${LATEST_BUILD})"
|
|
else
|
|
LATEST_VERSION="0.0"
|
|
LATEST_BUILD=0
|
|
echo " No previous releases found — starting from scratch"
|
|
fi
|
|
|
|
# Determine the next marketing version: bump minor by 0.1
|
|
# e.g. "1.5" → "1.6", "2.9" → "3.0" (carries over)
|
|
if [ $# -ge 1 ]; then
|
|
MARKETING_VERSION="$1"
|
|
else
|
|
MAJOR=$(echo "$LATEST_VERSION" | cut -d. -f1)
|
|
MINOR=$(echo "$LATEST_VERSION" | cut -d. -f2)
|
|
NEXT_MINOR=$((MINOR + 1))
|
|
if [ "$NEXT_MINOR" -ge 10 ]; then
|
|
MAJOR=$((MAJOR + 1))
|
|
NEXT_MINOR=0
|
|
fi
|
|
MARKETING_VERSION="${MAJOR}.${NEXT_MINOR}"
|
|
fi
|
|
|
|
# Determine the next build number: always increment by 1
|
|
if [ $# -ge 2 ]; then
|
|
BUILD_NUMBER="$2"
|
|
else
|
|
BUILD_NUMBER=$((LATEST_BUILD + 1))
|
|
fi
|
|
|
|
DMG_FILENAME="${APP_NAME}.dmg"
|
|
TAG="v${MARKETING_VERSION}"
|
|
|
|
# ── Safety checks ────────────────────────────────────────────────────────────
|
|
|
|
# Check if this tag already exists on GitHub to prevent accidental duplicates
|
|
if gh release view "${TAG}" --repo "${GITHUB_REPO}" &>/dev/null; then
|
|
echo ""
|
|
echo "❌ Release ${TAG} already exists on GitHub!"
|
|
echo " https://github.com/${GITHUB_REPO}/releases/tag/${TAG}"
|
|
echo ""
|
|
echo " To release a new version, either:"
|
|
echo " • Run without arguments to auto-bump: ./scripts/release.sh"
|
|
echo " • Specify a higher version: ./scripts/release.sh $(echo "${MARKETING_VERSION} + 0.1" | bc)"
|
|
echo " • Delete the existing release first: gh release delete ${TAG} --repo ${GITHUB_REPO} --yes"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
echo "🚀 Releasing ${APP_NAME} v${MARKETING_VERSION} (build ${BUILD_NUMBER})"
|
|
echo " Previous: ${LATEST_TAG:-none}"
|
|
echo ""
|
|
|
|
# Confirm with the user before proceeding
|
|
read -p " Proceed? (y/N) " -n 1 -r
|
|
echo ""
|
|
if [[ ! $REPLY =~ ^[Yy]$ ]]; then
|
|
echo " Aborted."
|
|
exit 0
|
|
fi
|
|
echo ""
|
|
|
|
# ── Step 1: Clean build directory ────────────────────────────────────────────
|
|
|
|
echo "🧹 Cleaning build directory and stale DMGs..."
|
|
rm -rf "${BUILD_DIR}"
|
|
# Remove any leftover temp DMGs from create-dmg (rw.*.dmg) and the previous
|
|
# same-named DMG so create-dmg and generate_appcast don't choke on duplicates.
|
|
rm -f "${RELEASES_DIR}"/rw.*.dmg "${RELEASES_DIR}/${DMG_FILENAME}"
|
|
mkdir -p "${BUILD_DIR}" "${EXPORT_DIR}" "${DMG_OUTPUT_DIR}" "${RELEASES_DIR}"
|
|
|
|
# ── Step 2: Archive ──────────────────────────────────────────────────────────
|
|
|
|
echo "📦 Archiving..."
|
|
xcodebuild archive \
|
|
-scheme "${SCHEME}" \
|
|
-archivePath "${ARCHIVE_PATH}" \
|
|
MARKETING_VERSION="${MARKETING_VERSION}" \
|
|
CURRENT_PROJECT_VERSION="${BUILD_NUMBER}" \
|
|
2>&1 | tail -5
|
|
|
|
echo "✅ Archive created"
|
|
|
|
# ── Step 3: Export (signed + notarized) ──────────────────────────────────────
|
|
|
|
# Create an export options plist for Developer ID distribution.
|
|
# This tells xcodebuild to sign with your Developer ID certificate
|
|
# and submit to Apple for notarization automatically.
|
|
EXPORT_OPTIONS="${BUILD_DIR}/ExportOptions.plist"
|
|
cat > "${EXPORT_OPTIONS}" << 'PLIST'
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>method</key>
|
|
<string>developer-id</string>
|
|
<key>destination</key>
|
|
<string>export</string>
|
|
</dict>
|
|
</plist>
|
|
PLIST
|
|
|
|
echo "📤 Exporting (signing + notarizing — this may take a few minutes)..."
|
|
xcodebuild -exportArchive \
|
|
-archivePath "${ARCHIVE_PATH}" \
|
|
-exportPath "${EXPORT_DIR}" \
|
|
-exportOptionsPlist "${EXPORT_OPTIONS}" \
|
|
2>&1 | tail -5
|
|
|
|
echo "✅ Export complete (signed + notarized)"
|
|
|
|
# ── Step 4: Create DMG ──────────────────────────────────────────────────────
|
|
|
|
DMG_PATH="${RELEASES_DIR}/${DMG_FILENAME}"
|
|
|
|
echo "💿 Creating DMG..."
|
|
create-dmg \
|
|
--volname "${APP_NAME}" \
|
|
--window-pos 200 120 \
|
|
--window-size 660 400 \
|
|
--icon-size 100 \
|
|
--icon "${APP_NAME}.app" 160 195 \
|
|
--app-drop-link 500 195 \
|
|
--background "${DMG_BACKGROUND}" \
|
|
"${DMG_PATH}" \
|
|
"${EXPORT_DIR}/${APP_NAME}.app" \
|
|
2>&1 | tail -3
|
|
|
|
echo "✅ DMG created: ${DMG_PATH}"
|
|
|
|
# ── Step 5: Notarize the DMG ─────────────────────────────────────────────────
|
|
# The .app inside the DMG is already signed with Developer ID, but the DMG
|
|
# itself needs to be submitted to Apple for notarization so Gatekeeper
|
|
# allows users to open it without the "Apple could not verify" warning.
|
|
# Requires stored credentials: xcrun notarytool store-credentials "AC_PASSWORD"
|
|
|
|
echo "🔏 Notarizing DMG with Apple (this may take a few minutes)..."
|
|
xcrun notarytool submit "${DMG_PATH}" \
|
|
--keychain-profile "AC_PASSWORD" \
|
|
--wait
|
|
|
|
echo "📎 Stapling notarization ticket to DMG..."
|
|
xcrun stapler staple "${DMG_PATH}"
|
|
|
|
echo "✅ DMG notarized and stapled"
|
|
|
|
# ── Step 6: Sign DMG with Sparkle EdDSA key ─────────────────────────────────
|
|
|
|
echo "🔐 Signing DMG with Sparkle EdDSA key..."
|
|
"${SPARKLE_BIN}/sign_update" "${DMG_PATH}"
|
|
|
|
# ── Step 7: Generate / update appcast.xml ────────────────────────────────────
|
|
# generate_appcast reads all DMGs in the releases/ directory, extracts version
|
|
# info from the app bundle inside each DMG, signs with your EdDSA key, and
|
|
# produces appcast.xml. The --download-url-prefix tells it where users will
|
|
# actually download the DMG from (GitHub Releases).
|
|
|
|
echo "📡 Generating appcast.xml..."
|
|
"${SPARKLE_BIN}/generate_appcast" \
|
|
--download-url-prefix "https://github.com/${GITHUB_REPO}/releases/download/${TAG}/" \
|
|
-o "${PROJECT_DIR}/appcast.xml" \
|
|
"${RELEASES_DIR}"
|
|
|
|
echo "✅ appcast.xml updated"
|
|
|
|
# ── Step 8: Create GitHub Release ────────────────────────────────────────────
|
|
# Create the release first so the DMG download URL is live before we push the
|
|
# appcast that references it.
|
|
|
|
echo "🏷️ Creating GitHub Release ${TAG}..."
|
|
gh release create "${TAG}" "${DMG_PATH}" \
|
|
--repo "${GITHUB_REPO}" \
|
|
--title "v${MARKETING_VERSION}" \
|
|
--notes "makesomething v${MARKETING_VERSION}" \
|
|
--latest
|
|
|
|
# ── Step 9: Push appcast.xml to the releases repo ───────────────────────────
|
|
# The appcast lives in makesomething-mac-app (the releases repo), not in the
|
|
# source code repo. We clone it to a temp dir, copy the new appcast, and push.
|
|
|
|
echo "📝 Pushing appcast.xml to ${GITHUB_REPO}..."
|
|
RELEASES_REPO_DIR=$(mktemp -d)
|
|
git clone --depth 1 "https://github.com/${GITHUB_REPO}.git" "${RELEASES_REPO_DIR}" 2>&1 | tail -2
|
|
cp "${PROJECT_DIR}/appcast.xml" "${RELEASES_REPO_DIR}/appcast.xml"
|
|
cd "${RELEASES_REPO_DIR}"
|
|
git add appcast.xml
|
|
git commit -m "Update appcast.xml for v${MARKETING_VERSION}" || echo " (no changes to commit)"
|
|
git push || echo " (push failed — you may need to push manually)"
|
|
cd "${PROJECT_DIR}"
|
|
rm -rf "${RELEASES_REPO_DIR}"
|
|
|
|
echo ""
|
|
echo "═══════════════════════════════════════════════════════════════"
|
|
echo "✅ Release v${MARKETING_VERSION} (build ${BUILD_NUMBER}) complete!"
|
|
echo ""
|
|
echo " DMG: ${DMG_PATH}"
|
|
echo " Appcast: ${PROJECT_DIR}/appcast.xml"
|
|
echo " Release: https://github.com/${GITHUB_REPO}/releases/tag/${TAG}"
|
|
echo ""
|
|
echo " Download URL (always latest):"
|
|
echo " https://github.com/${GITHUB_REPO}/releases/latest/download/${DMG_FILENAME}"
|
|
echo "═══════════════════════════════════════════════════════════════"
|