jess
/
Graphite
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update, tidy up, and standardize GitHub Actions workflows

This commit is contained in:
Keavon Chambers 2026-03-16 02:45:18 -07:00
parent f7815d0cd0
commit efd142f030
15 changed files with 224 additions and 173 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
.github/workflows/build-linux-bundle.yml vendored
View File

@ -1,9 +1,6 @@
name: Build Linux Bundle name: "Build Linux Bundle"
on: on:
push:
branches:
- master
workflow_dispatch: workflow_dispatch:
inputs: inputs:
push_to_cache: push_to_cache:
@ -11,6 +8,9 @@ on:
required: false required: false
type: boolean type: boolean
default: false default: false
push:
branches:
- master
jobs: jobs:
build: build:
@ -18,16 +18,19 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v4 - name: 📥 Clone repository
- uses: DeterminateSystems/nix-installer-action@main uses: actions/checkout@v4
- name: Free disk space - name: ❄ Install Nix
uses: DeterminateSystems/nix-installer-action@main
- name: 🗑 Free disk space
run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache
- name: Build Nix Package - name: 📦 Build Nix package
run: nix build --no-link --print-out-paths run: nix build --no-link --print-out-paths
- name: Push to Nix Cache - name: 📤 Push to Nix cache
if: github.ref == 'refs/heads/master' || inputs.push_to_cache == true if: github.ref == 'refs/heads/master' || inputs.push_to_cache == true
env: env:
NIX_CACHE_AUTH_TOKEN: ${{ secrets.NIX_CACHE_AUTH_TOKEN }} NIX_CACHE_AUTH_TOKEN: ${{ secrets.NIX_CACHE_AUTH_TOKEN }}
@ -35,23 +38,23 @@ jobs:
nix run nixpkgs#cachix -- authtoken $NIX_CACHE_AUTH_TOKEN nix run nixpkgs#cachix -- authtoken $NIX_CACHE_AUTH_TOKEN
nix build --no-link --print-out-paths | nix run nixpkgs#cachix -- push graphite nix build --no-link --print-out-paths | nix run nixpkgs#cachix -- push graphite
- name: Build Linux Bundle - name: 🏗 Build Linux bundle
run: nix build .#graphite-bundle.tar.xz && cp ./result ./graphite-linux-bundle.tar.xz run: nix build .#graphite-bundle.tar.xz && cp ./result ./graphite-linux-bundle.tar.xz
- name: Upload Linux Bundle - name: 📦 Upload Linux bundle
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:
name: graphite-linux-bundle name: graphite-linux-bundle
path: graphite-linux-bundle.tar.xz path: graphite-linux-bundle.tar.xz
compression-level: 0 compression-level: 0
- name: Setup Flatpak Tooling - name: 🔧 Install Flatpak tooling
run: | run: |
sudo apt-get update sudo apt-get update
sudo apt-get install -y flatpak flatpak-builder sudo apt-get install -y flatpak flatpak-builder
flatpak --user remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo flatpak --user remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
- name: Build Flatpak - name: 🏗 Build Flatpak
run: | run: |
nix build .#graphite-flatpak-manifest nix build .#graphite-flatpak-manifest
@ -67,7 +70,7 @@ jobs:
flatpak build-bundle repo Graphite.flatpak art.graphite.Graphite --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo flatpak build-bundle repo Graphite.flatpak art.graphite.Graphite --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo
- name: Upload Flatpak - name: 📦 Upload Flatpak package
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:
name: graphite-flatpak name: graphite-flatpak

25
.github/workflows/build-mac-bundle.yml vendored
View File

@ -1,4 +1,4 @@
name: Build Mac Bundle name: "Build Mac Bundle"
on: on:
workflow_dispatch: {} workflow_dispatch: {}
@ -14,10 +14,10 @@ jobs:
WASM_BINDGEN_CLI_VERSION: "0.2.100" WASM_BINDGEN_CLI_VERSION: "0.2.100"
steps: steps:
- name: Checkout - name: 📥 Clone repository
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Setup Rust - name: 🦀 Install Rust
uses: actions-rust-lang/setup-rust-toolchain@v1 uses: actions-rust-lang/setup-rust-toolchain@v1
with: with:
toolchain: stable toolchain: stable
@ -25,7 +25,7 @@ jobs:
rustflags: "" rustflags: ""
target: wasm32-unknown-unknown target: wasm32-unknown-unknown
- name: Cache Cargo - name: 💾 Set up Cargo cache
uses: actions/cache@v4 uses: actions/cache@v4
with: with:
path: | path: |
@ -34,7 +34,7 @@ jobs:
target target
key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }} key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
- name: Setup Node - name: 🟢 Install Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version-file: .nvmrc node-version-file: .nvmrc
@ -43,7 +43,7 @@ jobs:
package-lock.json package-lock.json
frontend/package-lock.json frontend/package-lock.json
- name: Install Native Dependencies - name: 🚧 Install native dependencies
env: env:
GITHUB_TOKEN: ${{ github.token }} GITHUB_TOKEN: ${{ github.token }}
BINSTALL_DISABLE_TELEMETRY: "true" BINSTALL_DISABLE_TELEMETRY: "true"
@ -64,25 +64,26 @@ jobs:
cargo binstall --no-confirm --force cargo-about cargo binstall --no-confirm --force cargo-about
cargo binstall --no-confirm --force "wasm-bindgen-cli@${WASM_BINDGEN_CLI_VERSION}" cargo binstall --no-confirm --force "wasm-bindgen-cli@${WASM_BINDGEN_CLI_VERSION}"
- name: Build Mac Bundle - name: 🏗 Build Mac bundle
env: env:
CARGO_TERM_COLOR: always CARGO_TERM_COLOR: always
run: cargo run build desktop run: cargo run build desktop
- name: Stage Artifacts - name: 📁 Stage artifacts
shell: bash shell: bash
run: | run: |
rm -rf target/artifacts rm -rf target/artifacts
mkdir -p target/artifacts mkdir -p target/artifacts
cp -R target/release/Graphite.app target/artifacts/Graphite.app cp -R target/release/Graphite.app target/artifacts/Graphite.app
- name: Upload Mac Bundle - name: 📦 Upload Mac bundle
if: github.ref != 'refs/heads/master'
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:
name: graphite-mac-bundle name: graphite-mac-bundle
path: target/artifacts path: target/artifacts
- name: Sign and Notarize Mac Bundle Preparation - name: 🔏 Sign and notarize (preparation)
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
env: env:
APPLE_CERT_BASE64: ${{ secrets.APPLE_CERT_BASE64 }} APPLE_CERT_BASE64: ${{ secrets.APPLE_CERT_BASE64 }}
@ -116,7 +117,7 @@ jobs:
</plist> </plist>
EOF EOF
- name: Sign and Notarize Mac Bundle - name: 🔏 Sign and notarize
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
env: env:
APPLE_EMAIL: ${{ secrets.APPLE_EMAIL }} APPLE_EMAIL: ${{ secrets.APPLE_EMAIL }}
@ -149,7 +150,7 @@ jobs:
spctl -a -vv "$APP_PATH" spctl -a -vv "$APP_PATH"
- name: Upload Mac Bundle Signed - name: 📦 Upload signed Mac bundle
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:

15
.github/workflows/build-nix-package.yml vendored
View File

@ -1,4 +1,4 @@
name: Build Nix Package name: "Build Nix Package"
on: on:
workflow_dispatch: {} workflow_dispatch: {}
@ -9,9 +9,14 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v4 - name: 📥 Clone repository
- uses: DeterminateSystems/nix-installer-action@main uses: actions/checkout@v4
- uses: DeterminateSystems/magic-nix-cache-action@main
- name: Build Nix Package Dev - name: ❄ Install Nix
uses: DeterminateSystems/nix-installer-action@main
- name: 💾 Set up Nix cache
uses: DeterminateSystems/magic-nix-cache-action@main
- name: 📦 Build Nix package dev
run: nix build .#graphite-dev --print-build-logs run: nix build .#graphite-dev --print-build-logs

36
.github/workflows/build-production.yml vendored
View File

@ -21,29 +21,29 @@ jobs:
INDEX_HTML_HEAD_REPLACEMENT: <script defer data-domain="editor.graphite.art" data-api="https://graphite.art/visit/event" src="https://graphite.art/visit/script.hash.js"></script> INDEX_HTML_HEAD_REPLACEMENT: <script defer data-domain="editor.graphite.art" data-api="https://graphite.art/visit/event" src="https://graphite.art/visit/script.hash.js"></script>
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🗑 Clear wasm-bindgen cache - name: 🗑 Clear wasm-bindgen cache
run: rm -r ~/.cache/.wasm-pack run: rm -r ~/.cache/.wasm-pack
- name: 🟢 Install the latest Node.js - name: 🟢 Install Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: "latest" node-version-file: .nvmrc
- name: 🚧 Install build dependencies - name: 🚧 Install build dependencies
run: | run: |
cd frontend cd frontend
npm run setup npm run setup
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
echo "Initial system version:" with:
rustc --version toolchain: stable
rustup update stable override: true
echo "Latest updated version:" rustflags: ""
rustc --version target: wasm32-unknown-unknown
- name: ✂ Replace template in <head> of index.html - name: ✂ Replace template in <head> of index.html
run: | run: |
@ -55,15 +55,11 @@ jobs:
run: mold -run cargo run build web run: mold -run cargo run build web
- name: 📤 Publish to Cloudflare Pages - name: 📤 Publish to Cloudflare Pages
id: cloudflare env:
uses: cloudflare/pages-action@1 CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
with: CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} run: |
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} npx wrangler@3 pages deploy "frontend/dist" --project-name="graphite-editor" --branch="master" --commit-dirty=true
gitHubToken: ${{ secrets.GITHUB_TOKEN }}
projectName: graphite-editor
directory: frontend/dist
branch: master
- name: 📦 Upload assets to GitHub release - name: 📦 Upload assets to GitHub release
env: env:

76
.github/workflows/deploy-master.yml → .github/workflows/build-web-bundle.yml vendored
View File

@ -1,6 +1,7 @@
name: "Deploy Master" name: "Build Web Bundle"
on: on:
workflow_dispatch: {}
push: push:
branches: branches:
- master - master
@ -10,7 +11,7 @@ env:
INDEX_HTML_HEAD_REPLACEMENT: <script defer data-domain="dev.graphite.art" data-api="https://graphite.art/visit/event" src="https://graphite.art/visit/script.hash.js"></script> INDEX_HTML_HEAD_REPLACEMENT: <script defer data-domain="dev.graphite.art" data-api="https://graphite.art/visit/event" src="https://graphite.art/visit/script.hash.js"></script>
jobs: jobs:
deploy: build:
runs-on: [self-hosted, target/wasm] runs-on: [self-hosted, target/wasm]
permissions: permissions:
contents: write contents: write
@ -22,25 +23,29 @@ jobs:
SCCACHE_DIR: /var/lib/github-actions/.cache SCCACHE_DIR: /var/lib/github-actions/.cache
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🗑 Clear wasm-bindgen cache - name: 🗑 Clear wasm-bindgen cache
run: rm -r ~/.cache/.wasm-pack || true run: rm -r ~/.cache/.wasm-pack || true
- name: 🟢 Install the latest Node.js - name: 🟢 Install Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: "latest" node-version-file: .nvmrc
- name: 🚧 Install build dependencies - name: 🚧 Install build dependencies
run: | run: |
cd frontend cd frontend
npm run setup npm run setup
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
rustup update stable with:
toolchain: stable
override: true
rustflags: ""
target: wasm32-unknown-unknown
- name: ✂ Replace template in <head> of index.html - name: ✂ Replace template in <head> of index.html
run: | run: |
@ -53,26 +58,57 @@ jobs:
- name: 📤 Publish to Cloudflare Pages - name: 📤 Publish to Cloudflare Pages
id: cloudflare id: cloudflare
uses: cloudflare/pages-action@1 env:
continue-on-error: true CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
with: CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} run: |
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} MAX_ATTEMPTS=5
gitHubToken: ${{ secrets.GITHUB_TOKEN }} DELAY=30
projectName: graphite-dev for ATTEMPT in $(seq 1 $MAX_ATTEMPTS); do
directory: frontend/dist echo "Attempt $ATTEMPT of $MAX_ATTEMPTS..."
if OUTPUT=$(npx wrangler@3 pages deploy "frontend/dist" --project-name="graphite-dev" --commit-dirty=true 2>&1); then
URL=$(echo "$OUTPUT" | grep -oP 'https://[^\s]+\.pages\.dev' | tail -1)
echo "url=$URL" >> "$GITHUB_OUTPUT"
echo "Published successfully: $URL"
exit 0
fi
echo "Attempt $ATTEMPT failed:"
echo "$OUTPUT"
if [ "$ATTEMPT" -lt "$MAX_ATTEMPTS" ]; then
echo "Retrying in ${DELAY}s..."
sleep $DELAY
DELAY=$((DELAY * 3))
fi
done
echo "All $MAX_ATTEMPTS Cloudflare Pages publish attempts failed."
exit 1
- name: 💬 Comment build link URL to commit hash page on GitHub - name: 💬 Comment build link URL to commit hash page on GitHub
env: env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
CF_URL: ${{ steps.cloudflare.outputs.url }}
run: | run: |
if [ -z "$CF_URL" ]; then
echo "No Cloudflare URL available, skipping comment."
exit 1
fi
gh api \ gh api \
-X POST \ -X POST \
-H "Accept: application/vnd.github+json" \ -H "Accept: application/vnd.github+json" \
/repos/${{ github.repository }}/commits/$(git rev-parse HEAD)/comments \ /repos/${{ github.repository }}/commits/$(git rev-parse HEAD)/comments \
-f body="| 📦 **Build Complete for** $(git rev-parse HEAD) | -f body="| 📦 **Build Complete for** $(git rev-parse HEAD) |
|-| |-|
| ${{ steps.cloudflare.outputs.url }} |" | $CF_URL |"
- name: ✂ Strip analytics script from built output for clean artifact
run: |
sed -i "s|$INDEX_HTML_HEAD_REPLACEMENT||" frontend/dist/index.html
- name: 📦 Upload web bundle artifact
uses: actions/upload-artifact@v4
with:
name: graphite-web-bundle
path: frontend/dist
- name: 📃 Generate code documentation info for website - name: 📃 Generate code documentation info for website
run: | run: |
@ -84,7 +120,7 @@ jobs:
- name: 💿 Obtain cache of auto-generated code docs artifacts, to check if they've changed - name: 💿 Obtain cache of auto-generated code docs artifacts, to check if they've changed
id: cache-website-code-docs id: cache-website-code-docs
uses: actions/cache/restore@v3 uses: actions/cache/restore@v4
with: with:
path: artifacts path: artifacts
key: website-code-docs key: website-code-docs
@ -105,7 +141,7 @@ jobs:
- name: 💾 Save cache of auto-generated code docs artifacts - name: 💾 Save cache of auto-generated code docs artifacts
if: steps.website-code-docs-changed.outputs.changed == 'true' if: steps.website-code-docs-changed.outputs.changed == 'true'
uses: actions/cache/save@v3 uses: actions/cache/save@v4
with: with:
path: artifacts path: artifacts
key: ${{ steps.cache-website-code-docs.outputs.cache-primary-key }} key: ${{ steps.cache-website-code-docs.outputs.cache-primary-key }}

36
.github/workflows/build-win-bundle.yml → .github/workflows/build-windows-bundle.yml vendored
View File

@ -1,4 +1,4 @@
name: Build Windows Bundle name: "Build Windows Bundle"
on: on:
workflow_dispatch: {} workflow_dispatch: {}
@ -6,22 +6,21 @@ on:
branches: branches:
- master - master
permissions:
contents: read
id-token: write
jobs: jobs:
build: build:
runs-on: windows-latest runs-on: windows-latest
permissions:
contents: read
id-token: write
env: env:
WASM_BINDGEN_CLI_VERSION: "0.2.100" WASM_BINDGEN_CLI_VERSION: "0.2.100"
steps: steps:
- name: Checkout - name: 📥 Clone repository
uses: actions/checkout@v4 uses: actions/checkout@v4
- name: Setup Rust - name: 🦀 Install Rust
uses: actions-rust-lang/setup-rust-toolchain@v1 uses: actions-rust-lang/setup-rust-toolchain@v1
with: with:
toolchain: stable toolchain: stable
@ -29,7 +28,7 @@ jobs:
rustflags: "" rustflags: ""
target: wasm32-unknown-unknown target: wasm32-unknown-unknown
- name: Cache Cargo - name: 💾 Set up Cargo cache
uses: actions/cache@v4 uses: actions/cache@v4
with: with:
path: | path: |
@ -38,7 +37,7 @@ jobs:
target target
key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }} key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
- name: Setup Node - name: 🟢 Install Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version-file: .nvmrc node-version-file: .nvmrc
@ -47,10 +46,10 @@ jobs:
package-lock.json package-lock.json
frontend/package-lock.json frontend/package-lock.json
- name: Setup Cargo Binstall - name: 📦 Install Cargo-binstall
uses: cargo-bins/cargo-binstall@main uses: cargo-bins/cargo-binstall@main
- name: Install Native Dependencies - name: 🚧 Install native dependencies
shell: pwsh shell: pwsh
env: env:
GITHUB_TOKEN: ${{ github.token }} GITHUB_TOKEN: ${{ github.token }}
@ -69,26 +68,27 @@ jobs:
cargo binstall --no-confirm --force cargo-about cargo binstall --no-confirm --force cargo-about
cargo binstall --no-confirm --force "wasm-bindgen-cli@$env:WASM_BINDGEN_CLI_VERSION" cargo binstall --no-confirm --force "wasm-bindgen-cli@$env:WASM_BINDGEN_CLI_VERSION"
- name: Build Windows Bundle - name: 🏗 Build Windows bundle
shell: bash # `cargo-about` refuses to run in powershell shell: bash # `cargo-about` refuses to run in powershell
env: env:
CARGO_TERM_COLOR: always CARGO_TERM_COLOR: always
run: cargo run build desktop run: cargo run build desktop
- name: Stage Artifacts - name: 📁 Stage artifacts
shell: bash shell: bash
run: | run: |
rm -rf target/artifacts rm -rf target/artifacts
mkdir -p target/artifacts mkdir -p target/artifacts
cp -R target/release/Graphite target/artifacts/Graphite cp -R target/release/Graphite target/artifacts/Graphite
- name: Upload Windows Bundle - name: 📦 Upload Windows bundle
if: github.ref != 'refs/heads/master'
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:
name: graphite-windows-bundle name: graphite-windows-bundle
path: target/artifacts path: target/artifacts
- name: Azure login - name: 🔑 Azure login
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
uses: azure/login@v1 uses: azure/login@v1
with: with:
@ -97,7 +97,7 @@ jobs:
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }} subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
enable-AzPSSession: true enable-AzPSSession: true
- name: Sign - name: 🔏 Sign
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
uses: azure/artifact-signing-action@v1 uses: azure/artifact-signing-action@v1
with: with:
@ -118,7 +118,7 @@ jobs:
timestamp-digest: SHA256 timestamp-digest: SHA256
correlation-id: ${{ github.sha }} correlation-id: ${{ github.sha }}
- name: Verify Signatures - name: ✅ Verify signatures
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
shell: pwsh shell: pwsh
run: | run: |
@ -165,7 +165,7 @@ jobs:
Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8 Out-File $env:GITHUB_STEP_SUMMARY -Append -Encoding utf8
} }
- name: Upload Windows Bundle Signed - name: 📦 Upload signed Windows bundle
if: github.ref == 'refs/heads/master' if: github.ref == 'refs/heads/master'
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v4
with: with:

8
.github/workflows/cargo-deny.yml vendored
View File

@ -1,9 +1,9 @@
name: "Audit Security Advisories" name: "Audit Security Advisories"
on: on:
# Run once each day # Run once each week
schedule: schedule:
- cron: "0 0 * * *" - cron: "0 0 * * 0"
jobs: jobs:
cargo-deny: cargo-deny:
@ -11,8 +11,8 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🔒 Check crate security advisories for root workspace - name: 🔒 Check crate security advisories for root workspace
uses: EmbarkStudios/cargo-deny-action@v2 uses: EmbarkStudios/cargo-deny-action@v2

58
.github/workflows/ci.yml vendored
View File

@ -12,17 +12,20 @@ jobs:
rust-fmt: rust-fmt:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🚦 Check if CI can be skipped - name: 🚦 Check if CI can be skipped
id: skip-check id: skip-check
uses: cariad-tech/merge-queue-ci-skipper@main uses: cariad-tech/merge-queue-ci-skipper@main
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
uses: dtolnay/rust-toolchain@stable uses: actions-rust-lang/setup-rust-toolchain@v1
with: with:
toolchain: stable
override: true
rustflags: ""
components: rustfmt components: rustfmt
- name: 🔬 Check Rust formatting - name: 🔬 Check Rust formatting
@ -33,8 +36,8 @@ jobs:
cargo-deny: cargo-deny:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 📜 Check crate license compatibility for root workspace - name: 📜 Check crate license compatibility for root workspace
uses: EmbarkStudios/cargo-deny-action@v2 uses: EmbarkStudios/cargo-deny-action@v2
@ -61,8 +64,8 @@ jobs:
SCCACHE_DIR: /var/lib/github-actions/.cache SCCACHE_DIR: /var/lib/github-actions/.cache
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🚦 Check if CI can be skipped - name: 🚦 Check if CI can be skipped
id: skip-check id: skip-check
@ -72,11 +75,11 @@ jobs:
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
run: rm -r ~/.cache/.wasm-pack || true run: rm -r ~/.cache/.wasm-pack || true
- name: 🟢 Install the latest Node.js - name: 🟢 Install Node.js
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: "latest" node-version-file: .nvmrc
- name: 🚧 Install build dependencies - name: 🚧 Install build dependencies
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
@ -84,10 +87,14 @@ jobs:
cd frontend cd frontend
npm run setup npm run setup
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
rustup update stable with:
toolchain: stable
override: true
rustflags: ""
target: wasm32-unknown-unknown
- name: 🦀 Fetch Rust dependencies - name: 🦀 Fetch Rust dependencies
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
@ -102,14 +109,12 @@ jobs:
- name: 📤 Publish to Cloudflare Pages - name: 📤 Publish to Cloudflare Pages
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
uses: cloudflare/pages-action@1
continue-on-error: true continue-on-error: true
with: env:
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
gitHubToken: ${{ secrets.GITHUB_TOKEN }} run: |
projectName: graphite-dev npx wrangler@3 pages deploy "frontend/dist" --project-name="graphite-dev" --commit-dirty=true
directory: frontend/dist
- name: 👕 Lint Graphite web formatting - name: 👕 Lint Graphite web formatting
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
@ -128,17 +133,20 @@ jobs:
SCCACHE_DIR: /var/lib/github-actions/.cache SCCACHE_DIR: /var/lib/github-actions/.cache
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🚦 Check if CI can be skipped - name: 🚦 Check if CI can be skipped
id: skip-check id: skip-check
uses: cariad-tech/merge-queue-ci-skipper@main uses: cariad-tech/merge-queue-ci-skipper@main
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
rustup update stable with:
toolchain: stable
override: true
rustflags: ""
- name: 🦀 Fetch Rust dependencies - name: 🦀 Fetch Rust dependencies
if: steps.skip-check.outputs.skip-check != 'true' if: steps.skip-check.outputs.skip-check != 'true'

44
.github/workflows/comment-!build-commands.yml vendored
View File

@ -43,8 +43,8 @@ jobs:
echo "ref=$REF" >> $GITHUB_OUTPUT echo "ref=$REF" >> $GITHUB_OUTPUT
echo "sha=$SHA" >> $GITHUB_OUTPUT echo "sha=$SHA" >> $GITHUB_OUTPUT
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
with: with:
repository: ${{ steps.commit_info.outputs.repo }} repository: ${{ steps.commit_info.outputs.repo }}
ref: ${{ steps.commit_info.outputs.ref }} ref: ${{ steps.commit_info.outputs.ref }}
@ -53,23 +53,23 @@ jobs:
continue-on-error: true continue-on-error: true
run: rm -r ~/.cache/.wasm-pack run: rm -r ~/.cache/.wasm-pack
- name: 🟢 Install the latest Node.js - name: 🟢 Install Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: "latest" node-version-file: .nvmrc
- name: 🚧 Install build dependencies - name: 🚧 Install build dependencies
run: | run: |
cd frontend cd frontend
npm run setup npm run setup
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
echo "Initial system version:" with:
rustc --version toolchain: stable
rustup update stable override: true
echo "Latest updated version:" rustflags: ""
rustc --version target: wasm32-unknown-unknown
- name: ✂ Replace template in <head> of index.html - name: ✂ Replace template in <head> of index.html
env: env:
@ -121,14 +121,18 @@ jobs:
- name: 📤 Publish to Cloudflare Pages - name: 📤 Publish to Cloudflare Pages
id: cloudflare id: cloudflare
uses: cloudflare/pages-action@1 env:
continue-on-error: true CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
with: CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} run: |
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} if OUTPUT=$(npx wrangler@3 pages deploy "frontend/dist" --project-name="graphite-dev" --commit-dirty=true 2>&1); then
gitHubToken: ${{ secrets.GITHUB_TOKEN }} URL=$(echo "$OUTPUT" | grep -oP 'https://[^\s]+\.pages\.dev' | tail -1)
projectName: graphite-dev echo "url=$URL" >> "$GITHUB_OUTPUT"
directory: frontend/dist echo "Published successfully: $URL"
else
echo "$OUTPUT"
exit 1
fi
- name: ❗ Warn on publish failure - name: ❗ Warn on publish failure
if: ${{ failure() }} if: ${{ failure() }}
@ -139,7 +143,7 @@ jobs:
issue_number: context.issue.number, issue_number: context.issue.number,
owner: context.repo.owner, owner: context.repo.owner,
repo: context.repo.repo, repo: context.repo.repo,
body: 'The deployment to Cloudflare Pages has failed. Please check the [build logs](https://github.com/GraphiteEditor/Graphite/actions/runs/' + context.runId + ') for details. body: 'The deployment to Cloudflare Pages has failed. Please check the [build logs](https://github.com/GraphiteEditor/Graphite/actions/runs/' + context.runId + ') for details.'
}); });
- name: 💬 Comment build link - name: 💬 Comment build link

2
.github/workflows/comment-clippy-warnings.yaml vendored
View File

@ -1,4 +1,4 @@
name: Clippy Check name: "Clippy Check"
on: on:
pull_request: pull_request:

2
.github/workflows/comment-profiling-changes.yaml vendored
View File

@ -1,4 +1,4 @@
name: Profiling Changes name: "Profiling Changes"
on: on:
pull_request: pull_request:

17
.github/workflows/library-rawkit.yml vendored
View File

@ -25,16 +25,15 @@ jobs:
SCCACHE_DIR: /var/lib/github-actions/.cache SCCACHE_DIR: /var/lib/github-actions/.cache
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
- name: 🦀 Install the latest Rust - name: 🦀 Install Rust
run: | uses: actions-rust-lang/setup-rust-toolchain@v1
echo "Initial system version:" with:
rustc --version toolchain: stable
rustup update stable override: true
echo "Latest updated version:" rustflags: ""
rustc --version
- name: 📦 Run sccache-cache - name: 📦 Run sccache-cache
uses: mozilla-actions/sccache-action@v0.0.6 uses: mozilla-actions/sccache-action@v0.0.6

17
.github/workflows/provide-shaders.yml vendored
View File

@ -1,4 +1,4 @@
name: Provide Shaders name: "Provide Shaders"
on: on:
push: push:
@ -12,14 +12,19 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v4 - name: 📥 Clone repository
- uses: DeterminateSystems/nix-installer-action@main uses: actions/checkout@v4
- uses: DeterminateSystems/magic-nix-cache-action@main
- name: Build graphene raster nodes shaders - name: ❄ Install Nix
uses: DeterminateSystems/nix-installer-action@main
- name: 💾 Set up Nix cache
uses: DeterminateSystems/magic-nix-cache-action@main
- name: 🏗 Build graphene raster nodes shaders
run: nix build .#graphite-raster-nodes-shaders && cp result raster_nodes_shaders_entrypoint.wgsl run: nix build .#graphite-raster-nodes-shaders && cp result raster_nodes_shaders_entrypoint.wgsl
- name: Upload graphene raster nodes shaders to artifacts repository - name: 📤 Upload graphene raster nodes shaders to artifacts repository
run: | run: |
bash .github/workflows/scripts/artifact-upload.bash \ bash .github/workflows/scripts/artifact-upload.bash \
${{ vars.ARTIFACTS_REPO_OWNER }} \ ${{ vars.ARTIFACTS_REPO_OWNER }} \

28
.github/workflows/website.yml vendored
View File

@ -1,6 +1,7 @@
name: "Website" name: "Website"
on: on:
workflow_dispatch: {}
push: push:
branches: branches:
- master - master
@ -9,7 +10,6 @@ on:
pull_request: pull_request:
paths: paths:
- website/** - website/**
workflow_dispatch: {}
env: env:
CARGO_TERM_COLOR: always CARGO_TERM_COLOR: always
INDEX_HTML_HEAD_INCLUSION: <script defer data-domain="graphite.art" data-api="/visit/event" src="/visit/script.hash.js"></script> INDEX_HTML_HEAD_INCLUSION: <script defer data-domain="graphite.art" data-api="/visit/event" src="/visit/script.hash.js"></script>
@ -23,16 +23,13 @@ jobs:
pull-requests: write pull-requests: write
steps: steps:
- name: 📥 Clone and checkout repository - name: 📥 Clone repository
uses: actions/checkout@v3 uses: actions/checkout@v4
# We can remove this step once `ubuntu-latest` has Node.js 22 or newer for its native TypeScript support. See: - name: 🟢 Install Node.js
# https://github.com/actions/runner-images?tab=readme-ov-file#available-images
# https://nodejs.org/en/learn/typescript/run-natively
- name: 📦 Install the latest Node.js
uses: actions/setup-node@v4 uses: actions/setup-node@v4
with: with:
node-version: "latest" node-version-file: .nvmrc
- name: 🕸 Install Zola - name: 🕸 Install Zola
uses: taiki-e/install-action@v2 uses: taiki-e/install-action@v2
@ -54,7 +51,7 @@ jobs:
- name: 💿 Obtain cache of auto-generated code docs artifacts - name: 💿 Obtain cache of auto-generated code docs artifacts
id: cache-website-code-docs id: cache-website-code-docs
uses: actions/cache/restore@v3 uses: actions/cache/restore@v4
with: with:
path: artifacts path: artifacts
key: website-code-docs key: website-code-docs
@ -98,12 +95,9 @@ jobs:
zola --config config.toml build --minify zola --config config.toml build --minify
- name: 📤 Publish to Cloudflare Pages - name: 📤 Publish to Cloudflare Pages
id: cloudflare
uses: cloudflare/pages-action@1
continue-on-error: true continue-on-error: true
with: env:
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
gitHubToken: ${{ secrets.GITHUB_TOKEN }} run: |
projectName: graphite-website npx wrangler@3 pages deploy "website/public" --project-name="graphite-website" --commit-dirty=true
directory: website/public

2
.nvmrc
View File

@ -1 +1 @@
20 24