ci: add snapshot prerelease workflow

Co-authored-by: D <code@dector.space>

Author: DCodeBot

.github/workflows/snapshot.yml

@@ -0,0 +1,78 @@
+name: Snapshot
+
+on:
+  workflow_run:
+    workflows:
+      - CI
+    types:
+      - completed
+
+permissions:
+  actions: read
+  contents: write
+
+concurrency:
+  group: snapshot
+  cancel-in-progress: true
+
+jobs:
+  publish:
+    name: Publish snapshot
+    if: >-
+      github.event.workflow_run.conclusion == 'success' &&
+      github.event.workflow_run.event == 'push' &&
+      github.event.workflow_run.head_branch == 'trunk'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout tested commit
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.workflow_run.head_sha }}
+          fetch-depth: 0
+
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: release-artifacts
+          path: out/release
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ github.token }}
+
+      - name: Publish snapshot prerelease
+        env:
+          GH_TOKEN: ${{ github.token }}
+          SNAPSHOT_SHA: ${{ github.event.workflow_run.head_sha }}
+          SNAPSHOT_RUN_URL: ${{ github.event.workflow_run.html_url }}
+        run: |
+          set -euo pipefail
+
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag -f snapshot "$SNAPSHOT_SHA"
+          git push --force origin refs/tags/snapshot
+
+          cat > release-notes.md <<EOF
+          Snapshot build for \`$SNAPSHOT_SHA\`.
+
+          CI run: $SNAPSHOT_RUN_URL
+          EOF
+
+          if gh release view snapshot >/dev/null 2>&1; then
+            gh release edit snapshot \
+              --title snapshot \
+              --notes-file release-notes.md \
+              --prerelease \
+              --latest=false
+          else
+            gh release create snapshot \
+              --title snapshot \
+              --notes-file release-notes.md \
+              --prerelease \
+              --latest=false \
+              --target "$SNAPSHOT_SHA"
+          fi
+
+          gh release view snapshot --json assets --jq '.assets[].name' |
+            xargs -r -n 1 gh release delete-asset snapshot -y
+
+          gh release upload snapshot out/release/* --clobber

.github/workflows/test.yml

@@ -0,0 +1,46 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test-build:
+    name: Test and build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Set up Task
+        uses: arduino/setup-task@v2
+
+      - name: Compute CI version
+        run: |
+          base_version="$(awk -F'"' '/^version:/ { print $2 }' xx.yml)"
+          echo "VERSION=${base_version}.${GITHUB_SHA::7}" >> "$GITHUB_ENV"
+
+      - name: Run tests
+        run: task ci:test
+
+      - name: Build all binaries
+        run: task ci:build
+
+      - name: Upload build artifacts
+        if: github.event_name == 'push' && github.ref == 'refs/heads/trunk'
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-artifacts
+          path: |
+            out/release/checksums.txt
+            out/release/serv-*

Taskfile.yml

@@ -10,22 +10,34 @@ tasks:
     cmds:
       - amber run tools/mark-release
 
+  ci:test:
+    cmds:
+      - go test ./...
+
+  ci:build:
+    env:
+      CGO_ENABLED: 0
+    cmds:
+      - |
+        test -n "${VERSION:-}" || (echo "VERSION is required" >&2; exit 1)
+        rm -rf ./out/release
+        mkdir -p ./out/release
+        LDFLAGS="-X main.versionOverride=$VERSION"
+        GOOS=linux GOARCH=amd64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-linux-amd64 ./
+        GOOS=linux GOARCH=arm64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-linux-arm64 ./
+        GOOS=darwin GOARCH=amd64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-darwin-amd64 ./
+        GOOS=darwin GOARCH=arm64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-darwin-arm64 ./
+        GOOS=windows GOARCH=amd64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-windows-amd64.exe ./
+        GOOS=windows GOARCH=arm64 go build -ldflags "$LDFLAGS" -o out/release/serv-$VERSION-windows-arm64.exe ./
+        sha256sum ./out/release/serv-* > ./out/release/checksums.txt
+
   build:all:
-    # deps:
-    #   - gen
     env:
       CGO_ENABLED: 0
     cmds:
-      - rm -r ./out/release || true
-      - SUFFIX=$(date +%s%3N | shasum | head -c 8)
-      - go build -o /tmp/serv-$SUFFIX ./
       - |
-        VERSION=$(/tmp/serv-$SUFFIX --version)
-        rm /tmp/serv-$SUFFIX
-        GOOS=linux GOARCH=amd64 go build -o out/release/serv-$VERSION-linux-amd64 ./
-        GOOS=linux GOARCH=arm64 go build -o out/release/serv-$VERSION-linux-arm64 ./
-        GOOS=darwin GOARCH=amd64 go build -o out/release/serv-$VERSION-darwin-amd64 ./
-        GOOS=darwin GOARCH=arm64 go build -o out/release/serv-$VERSION-darwin-arm64 ./
-        GOOS=windows GOARCH=amd64 go build -o out/release/serv-$VERSION-windows-amd64.exe ./
-        GOOS=windows GOARCH=arm64 go build -o out/release/serv-$VERSION-windows-arm64.exe ./
-      - sha256sum ./out/release/serv-* > ./out/release/checksums.txt
+        tmp_binary="$(mktemp -t serv.XXXXXX)"
+        go build -o "$tmp_binary" ./
+        VERSION="$($tmp_binary --version)"
+        rm "$tmp_binary"
+        VERSION="$VERSION" task ci:build

meta.go

@@ -20,9 +20,14 @@ func (self *Globals) Init() {
 //go:embed xx.yml
 var metaYAML string
 
+var versionOverride string
+
 const DefaultPort = 8080
 
 func getVersion() string {
+	if version := strings.TrimSpace(versionOverride); version != "" {
+		return version
+	}
 	var meta struct {
 		Version string `yaml:"version"`
 	}