ci: add release.yml — Gitea Release auf Tag-Push v* mit Artefakten

2026-05-12 00:33:33 -07:00
parent ac040ba1e4
commit 84fab72f23
1 changed files with 131 additions and 0 deletions
@@ -0,0 +1,131 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            build-essential gcc make cppcheck lcov \
+            python3 python3-pip ca-certificates \
+            jq curl
+
+      - name: Tag from ref
+        run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+
+      - name: Build + Tests + Coverage
+        run: |
+          make test
+          make coverage
+
+      - name: Traceability + Diagramme
+        run: |
+          python3 tools/traceability.py publish docs/traceability
+          python3 tools/render_plantuml.py
+
+      - name: Cppcheck-Report (XML)
+        run: |
+          cppcheck --enable=all --inconclusive --xml --xml-version=2 \
+            -I src src 2> build/cppcheck-report.xml || true
+
+      - name: Release-Bundle paketieren
+        run: |
+          BUNDLE_DIR="release/demo-epb-${TAG}"
+          mkdir -p "$BUNDLE_DIR/coverage" "$BUNDLE_DIR/traceability" "$BUNDLE_DIR/diagrams" "$BUNDLE_DIR/reports"
+
+          cp -r build/coverage-html/* "$BUNDLE_DIR/coverage/" 2>/dev/null || true
+          cp -r docs/traceability/* "$BUNDLE_DIR/traceability/"
+          cp -r docs/diagrams/* "$BUNDLE_DIR/diagrams/"
+          cp build/cppcheck-report.xml "$BUNDLE_DIR/reports/" 2>/dev/null || true
+
+          # Source-Archiv (was eingecheckt ist)
+          git archive --format=tar.gz \
+            --prefix="demo-epb-${TAG}/" \
+            HEAD -o "release/demo-epb-${TAG}-source.tar.gz"
+
+          # Artefakt-Archiv
+          tar -czf "release/demo-epb-${TAG}-artifacts.tar.gz" -C release "demo-epb-${TAG}"
+
+          ls -la release/
+
+      - name: Release-Notes generieren
+        run: |
+          cat > release/RELEASE_NOTES.md <<EOF
+          # demo-epb ${TAG}
+
+          Vollstaendige Demo des slohmaier Dev Process anhand einer
+          EPB-Steuergeraet-Software.
+
+          ## Was im Release enthalten ist
+
+          | Asset | Inhalt |
+          |-------|--------|
+          | \`demo-epb-${TAG}-source.tar.gz\` | Vollstaendiger Quellcode (git archive) |
+          | \`demo-epb-${TAG}-artifacts.tar.gz\` | Coverage-HTML, Traceability-Matrix, PlantUML-Diagramme, Cppcheck-Report |
+
+          ## Build-Beweis
+
+          - Alle Unit-Tests gruen (Linux-Runner verbindlich)
+          - Coverage gemessen mit gcov/lcov
+          - Statische Analyse mit Cppcheck
+          - MISRA-Check (siehe Cppcheck-Report)
+          - Traceability bidirektional verifiziert (siehe Matrix)
+
+          ## Referenzen
+
+          - Methodik: https://gitea.slohmaier.com/slohmaier/dev-process
+          - Commit: ${{ github.sha }}
+          - Built: $(date -u +%Y-%m-%dT%H:%M:%SZ)
+          EOF
+
+      - name: Gitea-Release anlegen + Artefakte hochladen
+        env:
+          GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          OWNER="${GITHUB_REPOSITORY_OWNER}"
+          REPO="${GITHUB_REPOSITORY##*/}"
+          API="${GITHUB_SERVER_URL}/api/v1"
+
+          # Create release (idempotent: if exists, fetch)
+          BODY=$(jq -Rs '.' < release/RELEASE_NOTES.md)
+          RESP=$(curl -sf -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\":\"${TAG}\",\"name\":\"demo-epb ${TAG}\",\"body\":${BODY},\"draft\":false,\"prerelease\":false}" \
+            "${API}/repos/${OWNER}/${REPO}/releases" || \
+            curl -sf -H "Authorization: token ${GITEA_TOKEN}" \
+              "${API}/repos/${OWNER}/${REPO}/releases/tags/${TAG}")
+          RELEASE_ID=$(echo "$RESP" | jq -r '.id')
+          echo "Release-ID: $RELEASE_ID"
+
+          # Upload each asset
+          for f in release/demo-epb-${TAG}-source.tar.gz \
+                   release/demo-epb-${TAG}-artifacts.tar.gz; do
+            NAME=$(basename "$f")
+            echo "Uploading $NAME ..."
+            curl -sf -X POST \
+              -H "Authorization: token ${GITEA_TOKEN}" \
+              -H "Content-Type: application/gzip" \
+              --data-binary "@$f" \
+              "${API}/repos/${OWNER}/${REPO}/releases/${RELEASE_ID}/assets?name=${NAME}"
+          done
+
+          echo "Release verfuegbar unter ${GITHUB_SERVER_URL}/${OWNER}/${REPO}/releases/tag/${TAG}"
+
+      - name: Upload artifacts (Backup als CI-Artefakt)
+        uses: actions/upload-artifact@v3
+        if: always()
+        with:
+          name: release-${{ env.TAG }}
+          path: release/