fix: updated packages, improved pipeline, added code signing for mac

.github/workflows/build_and_upload_apps.yml

@@ -1,20 +1,18 @@
-name: Build and Upload Artifacts for Linux
+name: Build and Upload Artifacts
 
 # @semantic-release/github publishes the release as final step
 on:
   release:
     types: [published]
 
-env:
-  NODE_VERSION: 18.14.2
-
 jobs:
   build:
-    name: Build release and upload
+    name: Build Tauri Apps and upload to release
 
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        # os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [macos-latest]
 
     runs-on: ${{ matrix.os }}
 
@@ -27,7 +25,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v3
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version-file: ".nvmrc"
 
       - name: Cache node_modules
         uses: actions/cache@v3
@@ -39,37 +37,53 @@ jobs:
             ${{ runner.os }}-node-
 
       - name: Setup Rust
-        uses: actions-rs/toolchain@v1
-        with:
-          toolchain: stable
-          profile: minimal
-          override: true
+        uses: dtolnay/rust-toolchain@stable
 
       - name: Cache Rust
-        uses: Swatinem/rust-cache@v1
+        uses: swatinem/rust-cache@v2
+        with:
+          workspaces: "./src-tauri -> target"
 
-      - name: Install Dependencies for Ubuntu
-        if: matrix.os == 'ubuntu-latest'
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y libgtk-3-dev webkit2gtk-4.0 libappindicator3-dev librsvg2-dev patchelf
+      # - name: Install Dependencies for Ubuntu
+      #   if: matrix.os == 'ubuntu-latest'
+      #   run: |
+      #     sudo apt-get update
+      #     sudo apt-get install -y libgtk-3-dev webkit2gtk-4.0 libappindicator3-dev librsvg2-dev patchelf
 
       - name: Install node packages
         if: steps.node-cache.outputs.cache-hit != 'true'
         run: yarn
 
-      - name: Bundle application
-        run: yarn run tauri build
+      - name: Build the app
+        uses: tauri-apps/tauri-action@v0
         env:
-          TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
-          TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
-
-      - name: Store signature as artifact
-        uses: actions/upload-artifact@v3
-        if: matrix.os == 'ubuntu-latest'
+          GITHUB_TOKEN: ${{ secrets.PAT }}
+          ENABLE_CODE_SIGNING: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
         with:
-          name: release-signature-${{ runner.os }}-${{ github.ref_name }}
-          path: src-tauri/target/release/bundle/appimage/bpmn-modeler_*_amd64.AppImage.tar.gz.sig
+          tagName: v__VERSION__ # the action automatically replaces \_\_VERSION\_\_ with the app version
+          releaseName: "BPMN v__VERSION__"
+          releaseBody: "See the assets to download this version and install."
+          releaseDraft: true
+          prerelease: false
+          args: "--verbose"
+
+      # - name: Bundle application
+      #   run: yarn run tauri build
+      #   env:
+      #     TAURI_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
+      #     TAURI_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
+
+      # - name: Store signature as artifact
+      #   uses: actions/upload-artifact@v3
+      #   if: matrix.os == 'ubuntu-latest'
+      #   with:
+      #     name: release-signature-${{ runner.os }}-${{ github.ref_name }}
+      #     path: src-tauri/target/release/bundle/appimage/bpmn-modeler_*_amd64.AppImage.tar.gz.sig
 
       - name: Store signature as artifact
         uses: actions/upload-artifact@v3
@@ -78,12 +92,12 @@ jobs:
           name: release-signature-${{ runner.os }}-${{ github.ref_name }}
           path: src-tauri/target/release/bundle/macos/*.app.tar.gz.sig
 
-      - name: Store signature as artifact
-        uses: actions/upload-artifact@v3
-        if: matrix.os == 'windows-latest'
-        with:
-          name: release-signature-${{ runner.os }}-${{ github.ref_name }}
-          path: src-tauri/target/release/bundle/msi/*.msi.zip.sig
+      # - name: Store signature as artifact
+      #   uses: actions/upload-artifact@v3
+      #   if: matrix.os == 'windows-latest'
+      #   with:
+      #     name: release-signature-${{ runner.os }}-${{ github.ref_name }}
+      #     path: src-tauri/target/release/bundle/msi/*.msi.zip.sig
 
       - name: Attach binary to tags
         run: node ci/attachBinariesToRelease.mjs ${{ secrets.PAT }} ${{ matrix.os }}
@@ -102,26 +116,27 @@ jobs:
         with:
           ref: tauri-updates
 
-      - name: Download signature file for Linux
-        id: signature-linux
-        uses: actions/download-artifact@v3
-        with:
-          name: release-signature-Linux-${{ github.ref_name }}
+      # - name: Download signature file for Linux
+      #   id: signature-linux
+      #   uses: actions/download-artifact@v3
+      #   with:
+      #     name: release-signature-Linux-${{ github.ref_name }}
 
       - name: Download signature file for MacOS
         id: signature-macos
         uses: actions/download-artifact@v3
         with:
           name: release-signature-macOS-${{ github.ref_name }}
 
-      - name: Download signature file for Windows
-        id: signature-windows
-        uses: actions/download-artifact@v3
-        with:
-          name: release-signature-Windows-${{ github.ref_name }}
+      # - name: Download signature file for Windows
+      #   id: signature-windows
+      #   uses: actions/download-artifact@v3
+      #   with:
+      #     name: release-signature-Windows-${{ github.ref_name }}
 
       - name: Create update file
-        run: ./create-update.sh "${{ github.ref_name }}" ${{ steps.signature-linux.outputs.download-path }} ${{ steps.signature-macos.outputs.download-path }} ${{ steps.signature-windows.outputs.download-path }}
+        # run: ./create-update.sh "${{ github.ref_name }}" ${{ steps.signature-linux.outputs.download-path }} ${{ steps.signature-macos.outputs.download-path }} ${{ steps.signature-windows.outputs.download-path }}
+        run: ./create-update.sh "${{ github.ref_name }}" ${{ steps.signature-macos.outputs.download-path }}
 
       - uses: stefanzweifel/git-auto-commit-action@v4
         with:

.github/workflows/release.yml

@@ -2,9 +2,6 @@ name: Release
 
 on: push
 
-env:
-  NODE_VERSION: 18.14.2
-
 jobs:
   # this installs the React dependencies, runs the tests (if there were any) and creates a new release/tag on Github if on main branch
   # creating the tauri binaries for the release happens in the tauri job
@@ -24,7 +21,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v3
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version-file: ".nvmrc"
 
       - name: Cache node_modules
         uses: actions/cache@v3
@@ -56,7 +53,7 @@ jobs:
       - name: Setup node
         uses: actions/setup-node@v3
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version-file: ".nvmrc"
 
       - name: Cache node_modules
         uses: actions/cache@v3