jazzer.js/.github/workflows/release.yaml at main · CodeIntelligenceTesting/jazzer.js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
name: "🚀 Release"

on:
  workflow_dispatch:
  push:
    tags:
      - "v*.*.*"

jobs:
  prebuilds:
    name: create prebuilds
    permissions:
      contents: read
    strategy:
      matrix:
        os: [ubuntu-latest, ubuntu-24.04-arm, macos-latest, windows-latest]
        arch: [""]
        include:
          # macos-latest is arm64; cross-compile for x64 too
          - os: macos-latest
            arch: "--arch x86_64"
    runs-on: ${{ matrix.os }}
    steps:
      - name: checkout
        uses: actions/checkout@v6
      - name: node
        uses: actions/setup-node@v6
        with:
          node-version: 22
          cache: "npm"
      - name: MSVC (windows)
        uses: ilammy/msvc-dev-cmd@v1
        if: contains(matrix.os, 'windows')
      - name: install dependencies
        run: npm ci
      - name: build
        run: |
          npm run prebuild --workspace=@jazzer.js/fuzzer -- ${{ matrix.arch }}
          npm run build --workspace=@jazzer.js/fuzzer -- ${{ matrix.arch }}
      - name: upload
        uses: actions/upload-artifact@v7
        with:
          name: native-addon-${{ matrix.os }}${{ matrix.arch && '-x64' || '' }}
          path: packages/fuzzer/prebuilds
          if-no-files-found: error

  verify-prebuilds:
    name: verify prebuilds
    needs: [prebuilds]
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: download prebuilds
        uses: actions/download-artifact@v8
        with:
          pattern: native-addon-*
          path: prebuilds
          merge-multiple: true
      - name: verify all platforms are present
        run: |
          expected="fuzzer-darwin-arm64.node fuzzer-darwin-x64.node fuzzer-linux-arm64.node fuzzer-linux-x64.node fuzzer-win32-x64.node"
          for f in $expected; do
            if [ ! -f "prebuilds/$f" ]; then
              echo "MISSING: $f"
              exit 1
            fi
          done
          expected_count=$(echo $expected | wc -w)
          actual_count=$(ls prebuilds/ | wc -l)
          if [ "$actual_count" -ne "$expected_count" ]; then
            echo "Expected $expected_count prebuilds but found $actual_count:"
            ls -lh prebuilds/
            exit 1
          fi
          echo "Verified $expected_count prebuilds. All as expected:"
          ls -lh prebuilds/

  publish:
    name: publish
    if: startsWith(github.ref, 'refs/tags/')
    needs: [verify-prebuilds]
    runs-on: ubuntu-latest
    permissions:
      id-token: write # Required for OIDC
      contents: write # for creating GH releases
    steps:
      - name: checkout
        uses: actions/checkout@v6
      - name: node
        uses: actions/setup-node@v6
        with:
          node-version: 24
          cache: "npm"
      - name: install
        run: npm ci
      - name: build
        run: npm run build
      - name: download prebuilds
        uses: actions/download-artifact@v8
        with:
          pattern: native-addon-*
          path: packages/fuzzer/prebuilds
          merge-multiple: true
      - name: publish
        run: npm publish --workspaces --provenance
      # create GitHub release
      - name: read version
        id: read-version
        run: |
          echo ::set-output name=version::\
          $(cat ./package.json | jq '.version' | tr -d '"')
        shell: bash
      - name: create release
        uses: softprops/action-gh-release@v1
        with:
          name: Release ${{ steps.read-version.outputs.version }}
          body_path: ./.github/release_template.md
          generate_release_notes: true
          draft: true