demo-epb/.gitea/workflows/release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

jobs:
  release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            build-essential gcc make cppcheck lcov \
            python3 python3-pip ca-certificates \
            doxygen graphviz \
            jq curl

      - name: Tag from ref
        run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV

      - name: Build + Tests + Coverage + Test-Report
        run: |
          make test
          make coverage
          make test-report

      - name: Traceability + Diagramme + API-Doc + Landing-Page
        run: |
          python3 tools/traceability.py publish docs/traceability
          python3 tools/render_plantuml.py
          make docs
          make landing-page

      - name: Cppcheck-Report (XML)
        run: |
          mkdir -p build
          cppcheck --enable=all --inconclusive --xml --xml-version=2 \
            -I src src 2> build/cppcheck-report.xml || true

      - name: Release-Bundle paketieren
        run: |
          BUNDLE="release/demo-epb-${TAG}"
          mkdir -p "$BUNDLE"/{coverage,traceability,diagrams,api-doc,reports,docs,src,tests}

          # Landing-Page (Startseite) im Bundle-Root
          cp build/index.html               "$BUNDLE/index.html"

          # CI-generierte Artefakte
          cp -r build/coverage-html/*        "$BUNDLE/coverage/"       2>/dev/null || true
          cp -r docs/traceability/*          "$BUNDLE/traceability/"
          cp -r docs/diagrams/*              "$BUNDLE/diagrams/"
          cp -r build/api-doc/html/*         "$BUNDLE/api-doc/"        2>/dev/null || true
          cp    build/cppcheck-report.xml    "$BUNDLE/reports/"        2>/dev/null || true
          cp    build/test-report.html       "$BUNDLE/reports/"        2>/dev/null || true
          cp    build/test-report.md         "$BUNDLE/reports/"        2>/dev/null || true

          # Source-Code zum Anklicken aus dem Bundle (begrenzt auf das wichtigste)
          cp -r src/*.c src/*.h             "$BUNDLE/src/"             2>/dev/null || true
          cp -r src/stubs                   "$BUNDLE/src/"             2>/dev/null || true

          # Alle Word-Dokumente (Plaene, Safety, Manuals, Audit-Artefakte)
          mkdir -p "$BUNDLE/docs/plaene" "$BUNDLE/docs/safety" "$BUNDLE/docs/manuals" \
                   "$BUNDLE/docs/reviews" "$BUNDLE/docs/non-conformities" "$BUNDLE/docs/misra"
          cp docs/*.docx                                "$BUNDLE/docs/plaene/"          2>/dev/null || true
          cp -r docs/safety/*                           "$BUNDLE/docs/safety/"          2>/dev/null || true
          cp -r docs/manuals/*                          "$BUNDLE/docs/manuals/"         2>/dev/null || true
          cp -r docs/reviews/*                          "$BUNDLE/docs/reviews/"         2>/dev/null || true
          cp -r docs/non-conformities/*                 "$BUNDLE/docs/non-conformities/" 2>/dev/null || true
          cp -r misra/records/*                         "$BUNDLE/docs/misra/"           2>/dev/null || true

          # Source archive
          git archive --format=tar.gz \
            --prefix="demo-epb-${TAG}/" \
            HEAD -o "release/demo-epb-${TAG}-source.tar.gz"

          # Artefakt-Archiv (Engineering + Docs zusammen)
          tar -czf "release/demo-epb-${TAG}-artifacts.tar.gz" -C release "demo-epb-${TAG}"

          ls -la release/

      - name: Release-Notes generieren
        run: |
          cat > release/RELEASE_NOTES.md <<EOF
          # demo-epb ${TAG}

          Vollstaendige Demo des slohmaier Dev Process anhand einer
          EPB-Steuergeraet-Software.

          ## Release-Bundle Inhalt

          | Asset | Inhalt |
          |-------|--------|
          | \`demo-epb-${TAG}-source.tar.gz\` | Vollstaendiger Quellcode (git archive) |
          | \`demo-epb-${TAG}-artifacts.tar.gz\` | Alle generierten und kuratierten Dokumente |

          ### Im Artefakt-Bundle enthalten

          **Engineering (CI-generiert):**
          - \`coverage/\` — gcov/lcov HTML-Coverage-Report
          - \`traceability/\` — Bidirektionale Traceability-Matrix als HTML + JSON
          - \`diagrams/\` — PlantUML-Architektur-Diagramme als SVG
          - \`api-doc/\` — Doxygen-generierte API-Dokumentation
          - \`reports/cppcheck-report.xml\` — Statische Analyse + MISRA
          - \`reports/test-report.html\` — Test-Summary mit Anforderungs-Mapping

          **Dokumente (Word, kuratiert):**
          - \`docs/plaene/\` — PID, PM-/QA-/SWE-/Test-Plan
          - \`docs/safety/\` — HARA, Safety Case, FMEDA, MISRA-Compliance, Verification-Report, Tool-Qualification
          - \`docs/manuals/\` — User-Manual + Service-Manual
          - \`docs/reviews/\` — Review-Protokoll(e)
          - \`docs/non-conformities/\` — Non-Conformity-Eintraege
          - \`docs/misra/\` — MISRA Deviation Records

          ## Build-Beweis

          - Alle 41 Unit-Tests gruen (Linux-Runner verbindlich)
          - Coverage gemessen mit gcov/lcov
          - Statische Analyse mit Cppcheck (0 Findings)
          - MISRA-C:2012 Compliance bestaetigt (1 Advisory Deviation)
          - Traceability bidirektional verifiziert (50 Items)

          ## Referenzen

          - Methodik: https://gitea.slohmaier.com/slohmaier/dev-process
          - Commit: ${{ github.sha }}
          - Built: $(date -u +%Y-%m-%dT%H:%M:%SZ)
          EOF

      - name: Gitea-Release anlegen + Artefakte hochladen
        env:
          GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          OWNER="${GITHUB_REPOSITORY_OWNER}"
          REPO="${GITHUB_REPOSITORY##*/}"
          API="${GITHUB_SERVER_URL}/api/v1"

          BODY=$(jq -Rs '.' < release/RELEASE_NOTES.md)
          RESP=$(curl -sf -X POST \
            -H "Authorization: token ${GITEA_TOKEN}" \
            -H "Content-Type: application/json" \
            -d "{\"tag_name\":\"${TAG}\",\"name\":\"demo-epb ${TAG}\",\"body\":${BODY},\"draft\":false,\"prerelease\":false}" \
            "${API}/repos/${OWNER}/${REPO}/releases" || \
            curl -sf -H "Authorization: token ${GITEA_TOKEN}" \
              "${API}/repos/${OWNER}/${REPO}/releases/tags/${TAG}")
          RELEASE_ID=$(echo "$RESP" | jq -r '.id')
          echo "Release-ID: $RELEASE_ID"

          for f in release/demo-epb-${TAG}-source.tar.gz \
                   release/demo-epb-${TAG}-artifacts.tar.gz; do
            NAME=$(basename "$f")
            echo "Uploading $NAME ..."
            curl -sf -X POST \
              -H "Authorization: token ${GITEA_TOKEN}" \
              -H "Content-Type: application/gzip" \
              --data-binary "@$f" \
              "${API}/repos/${OWNER}/${REPO}/releases/${RELEASE_ID}/assets?name=${NAME}"
          done

          echo "Release verfuegbar unter ${GITHUB_SERVER_URL}/${OWNER}/${REPO}/releases/tag/${TAG}"

      - name: Upload artifacts (Backup als CI-Artefakt)
        uses: actions/upload-artifact@v3
        if: always()
        with:
          name: release-${{ env.TAG }}
          path: release/