
The installer, uninstaller, and the Zed binary files are all signed using Microsoft’s newly launched Trusted Signing service. For demonstration purposes, I have used my own account for the signing process. For more information about Trusted Signing, you can refer to the following links: - [Microsoft Security Blog: Trusted Signing is in Public Preview](https://techcommunity.microsoft.com/blog/microsoft-security-blog/trusted-signing-is-in-public-preview/4103457) - [Overview of Azure Trusted Signing](https://learn.microsoft.com/en-us/azure/trusted-signing/overview) **TODO:** - [x] `InnoSetup` script to setup an installer - [x] Signing process - [x] `Open with Zed` in right click context menu (by using sparse package) - [x] Integrate with `cli` - [x] Implement `cli` (#25412) - [x] Pack `cli.exe` into installer - [x] Implement auto updating (#25734) - [x] Pack autoupdater helper into installer - [x] Implement dock menus - [x] Add `Recent Documents` entries (#26369) - [x] Make `zed.exe` aware of sigle instance (#25412) - [x] Properly handle dock menu events (#26010) - [x] Handle `zed://***` uri **Materials needed:** - [ ] Icons - [ ] App icon for all channels (#9571) - [ ] Associated file icons, at minimum a default icon ([example](https://github.com/microsoft/vscode/tree/main/resources/win32)) - [ ] Logos for installer wizard - [ ] Icons for appx - [x] Code signing - [x] Secrets: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, ACCOUNT_NAME, CERT_PROFILE_NAME - [x] Other constants: ENDPOINT, Identity Signature (i.e. `CN=Junkui Zhang, O=Junkui Zhang, L=Wuhan, S=Hubei, C=CN`)  https://github.com/user-attachments/assets/4f1092b4-90fc-4a47-a868-8f2f1a5d8ad8 Release Notes: - N/A --------- Co-authored-by: Kate <kate@zed.dev> Co-authored-by: localcc <work@localcc.cc> Co-authored-by: Peter Tripp <peter@zed.dev> Co-authored-by: Max Brunsfeld <maxbrunsfeld@gmail.com>
314 lines
10 KiB
YAML
314 lines
10 KiB
YAML
name: Release Nightly
|
|
|
|
on:
|
|
schedule:
|
|
# Fire every day at 7:00am UTC (Roughly before EU workday and after US workday)
|
|
- cron: "0 7 * * *"
|
|
push:
|
|
tags:
|
|
- "nightly"
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
CARGO_INCREMENTAL: 0
|
|
RUST_BACKTRACE: 1
|
|
|
|
jobs:
|
|
style:
|
|
timeout-minutes: 60
|
|
name: Check formatting and Clippy lints
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on:
|
|
- self-hosted
|
|
- macOS
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
fetch-depth: 0
|
|
|
|
- name: Run style checks
|
|
uses: ./.github/actions/check_style
|
|
|
|
- name: Run clippy
|
|
run: ./script/clippy
|
|
|
|
tests:
|
|
timeout-minutes: 60
|
|
name: Run tests
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on:
|
|
- self-hosted
|
|
- macOS
|
|
needs: style
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Run tests
|
|
uses: ./.github/actions/run_tests
|
|
|
|
windows-tests:
|
|
timeout-minutes: 60
|
|
name: Run tests on Windows
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on: [self-hosted, Windows, X64]
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Configure CI
|
|
run: |
|
|
New-Item -ItemType Directory -Path "./../.cargo" -Force
|
|
Copy-Item -Path "./.cargo/ci-config.toml" -Destination "./../.cargo/config.toml"
|
|
|
|
- name: Run tests
|
|
uses: ./.github/actions/run_tests_windows
|
|
|
|
- name: Limit target directory size
|
|
run: ./script/clear-target-dir-if-larger-than.ps1 1024
|
|
|
|
- name: Clean CI config file
|
|
if: always()
|
|
run: Remove-Item -Recurse -Path "./../.cargo" -Force -ErrorAction SilentlyContinue
|
|
|
|
bundle-mac:
|
|
timeout-minutes: 60
|
|
name: Create a macOS bundle
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on:
|
|
- self-hosted
|
|
- bundle
|
|
needs: tests
|
|
env:
|
|
MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
|
|
MACOS_CERTIFICATE_PASSWORD: ${{ secrets.MACOS_CERTIFICATE_PASSWORD }}
|
|
APPLE_NOTARIZATION_KEY: ${{ secrets.APPLE_NOTARIZATION_KEY }}
|
|
APPLE_NOTARIZATION_KEY_ID: ${{ secrets.APPLE_NOTARIZATION_KEY_ID }}
|
|
APPLE_NOTARIZATION_ISSUER_ID: ${{ secrets.APPLE_NOTARIZATION_ISSUER_ID }}
|
|
DIGITALOCEAN_SPACES_ACCESS_KEY: ${{ secrets.DIGITALOCEAN_SPACES_ACCESS_KEY }}
|
|
DIGITALOCEAN_SPACES_SECRET_KEY: ${{ secrets.DIGITALOCEAN_SPACES_SECRET_KEY }}
|
|
ZED_CLIENT_CHECKSUM_SEED: ${{ secrets.ZED_CLIENT_CHECKSUM_SEED }}
|
|
steps:
|
|
- name: Install Node
|
|
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
|
|
with:
|
|
node-version: "18"
|
|
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Set release channel to nightly
|
|
run: |
|
|
set -eu
|
|
version=$(git rev-parse --short HEAD)
|
|
echo "Publishing version: ${version} on release channel nightly"
|
|
echo "nightly" > crates/zed/RELEASE_CHANNEL
|
|
|
|
- name: Create macOS app bundle
|
|
run: script/bundle-mac
|
|
|
|
- name: Upload Zed Nightly
|
|
run: script/upload-nightly macos
|
|
|
|
bundle-linux-x86:
|
|
timeout-minutes: 60
|
|
name: Create a Linux *.tar.gz bundle for x86
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on:
|
|
- buildjet-16vcpu-ubuntu-2004
|
|
needs: tests
|
|
env:
|
|
DIGITALOCEAN_SPACES_ACCESS_KEY: ${{ secrets.DIGITALOCEAN_SPACES_ACCESS_KEY }}
|
|
DIGITALOCEAN_SPACES_SECRET_KEY: ${{ secrets.DIGITALOCEAN_SPACES_SECRET_KEY }}
|
|
ZED_CLIENT_CHECKSUM_SEED: ${{ secrets.ZED_CLIENT_CHECKSUM_SEED }}
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Add Rust to the PATH
|
|
run: echo "$HOME/.cargo/bin" >> $GITHUB_PATH
|
|
|
|
- name: Install Linux dependencies
|
|
run: ./script/linux && ./script/install-mold 2.34.0
|
|
|
|
- name: Limit target directory size
|
|
run: script/clear-target-dir-if-larger-than 100
|
|
|
|
- name: Set release channel to nightly
|
|
run: |
|
|
set -euo pipefail
|
|
version=$(git rev-parse --short HEAD)
|
|
echo "Publishing version: ${version} on release channel nightly"
|
|
echo "nightly" > crates/zed/RELEASE_CHANNEL
|
|
|
|
- name: Create Linux .tar.gz bundle
|
|
run: script/bundle-linux
|
|
|
|
- name: Upload Zed Nightly
|
|
run: script/upload-nightly linux-targz
|
|
|
|
bundle-linux-arm:
|
|
timeout-minutes: 60
|
|
name: Create a Linux *.tar.gz bundle for ARM
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on:
|
|
- buildjet-16vcpu-ubuntu-2204-arm
|
|
needs: tests
|
|
env:
|
|
DIGITALOCEAN_SPACES_ACCESS_KEY: ${{ secrets.DIGITALOCEAN_SPACES_ACCESS_KEY }}
|
|
DIGITALOCEAN_SPACES_SECRET_KEY: ${{ secrets.DIGITALOCEAN_SPACES_SECRET_KEY }}
|
|
ZED_CLIENT_CHECKSUM_SEED: ${{ secrets.ZED_CLIENT_CHECKSUM_SEED }}
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Install Linux dependencies
|
|
run: ./script/linux
|
|
|
|
- name: Limit target directory size
|
|
run: script/clear-target-dir-if-larger-than 100
|
|
|
|
- name: Set release channel to nightly
|
|
run: |
|
|
set -euo pipefail
|
|
version=$(git rev-parse --short HEAD)
|
|
echo "Publishing version: ${version} on release channel nightly"
|
|
echo "nightly" > crates/zed/RELEASE_CHANNEL
|
|
|
|
- name: Create Linux .tar.gz bundle
|
|
run: script/bundle-linux
|
|
|
|
- name: Upload Zed Nightly
|
|
run: script/upload-nightly linux-targz
|
|
|
|
freebsd:
|
|
timeout-minutes: 60
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on: github-8vcpu-ubuntu-2404
|
|
needs: tests
|
|
env:
|
|
DIGITALOCEAN_SPACES_ACCESS_KEY: ${{ secrets.DIGITALOCEAN_SPACES_ACCESS_KEY }}
|
|
DIGITALOCEAN_SPACES_SECRET_KEY: ${{ secrets.DIGITALOCEAN_SPACES_SECRET_KEY }}
|
|
name: Build Zed on FreeBSD
|
|
# env:
|
|
# MYTOKEN : ${{ secrets.MYTOKEN }}
|
|
# MYTOKEN2: "value2"
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Build FreeBSD remote-server
|
|
id: freebsd-build
|
|
uses: vmactions/freebsd-vm@c3ae29a132c8ef1924775414107a97cac042aad5 # v1.2.0
|
|
with:
|
|
# envs: "MYTOKEN MYTOKEN2"
|
|
usesh: true
|
|
release: 13.5
|
|
copyback: true
|
|
prepare: |
|
|
pkg install -y \
|
|
bash curl jq git \
|
|
rustup-init cmake-core llvm-devel-lite pkgconf protobuf # ibx11 alsa-lib rust-bindgen-cli
|
|
run: |
|
|
freebsd-version
|
|
sysctl hw.model
|
|
sysctl hw.ncpu
|
|
sysctl hw.physmem
|
|
sysctl hw.usermem
|
|
git config --global --add safe.directory /home/runner/work/zed/zed
|
|
rustup-init --profile minimal --default-toolchain none -y
|
|
. "$HOME/.cargo/env"
|
|
./script/bundle-freebsd
|
|
mkdir -p out/
|
|
mv "target/zed-remote-server-freebsd-x86_64.gz" out/
|
|
rm -rf target/
|
|
cargo clean
|
|
|
|
- name: Upload Zed Nightly
|
|
run: script/upload-nightly freebsd
|
|
|
|
bundle-nix:
|
|
name: Build and cache Nix package
|
|
if: false
|
|
needs: tests
|
|
secrets: inherit
|
|
uses: ./.github/workflows/nix.yml
|
|
|
|
bundle-windows-x64:
|
|
timeout-minutes: 60
|
|
name: Create a Windows installer
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on: [self-hosted, Windows, X64]
|
|
needs: windows-tests
|
|
env:
|
|
AZURE_TENANT_ID: ${{ secrets.AZURE_SIGNING_TENANT_ID }}
|
|
AZURE_CLIENT_ID: ${{ secrets.AZURE_SIGNING_CLIENT_ID }}
|
|
AZURE_CLIENT_SECRET: ${{ secrets.AZURE_SIGNING_CLIENT_SECRET }}
|
|
ACCOUNT_NAME: ${{ vars.AZURE_SIGNING_ACCOUNT_NAME }}
|
|
CERT_PROFILE_NAME: ${{ vars.AZURE_SIGNING_CERT_PROFILE_NAME }}
|
|
ENDPOINT: ${{ vars.AZURE_SIGNING_ENDPOINT }}
|
|
DIGITALOCEAN_SPACES_ACCESS_KEY: ${{ secrets.DIGITALOCEAN_SPACES_ACCESS_KEY }}
|
|
DIGITALOCEAN_SPACES_SECRET_KEY: ${{ secrets.DIGITALOCEAN_SPACES_SECRET_KEY }}
|
|
FILE_DIGEST: SHA256
|
|
TIMESTAMP_DIGEST: SHA256
|
|
TIMESTAMP_SERVER: "http://timestamp.acs.microsoft.com"
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
clean: false
|
|
|
|
- name: Set release channel to nightly
|
|
working-directory: ${{ env.ZED_WORKSPACE }}
|
|
run: |
|
|
$ErrorActionPreference = "Stop"
|
|
$version = git rev-parse --short HEAD
|
|
Write-Host "Publishing version: $version on release channel nightly"
|
|
"nightly" | Set-Content -Path "crates/zed/RELEASE_CHANNEL"
|
|
|
|
- name: Install trusted signing
|
|
uses: ./.github/actions/install_trusted_signing
|
|
|
|
- name: Build Zed installer
|
|
working-directory: ${{ env.ZED_WORKSPACE }}
|
|
run: script/bundle-windows.ps1
|
|
|
|
- name: Upload Zed Nightly
|
|
working-directory: ${{ env.ZED_WORKSPACE }}
|
|
run: script/upload-nightly.ps1 windows
|
|
|
|
update-nightly-tag:
|
|
name: Update nightly tag
|
|
if: github.repository_owner == 'zed-industries'
|
|
runs-on: ubuntu-latest
|
|
needs:
|
|
- bundle-mac
|
|
- bundle-linux-x86
|
|
- bundle-linux-arm
|
|
- bundle-windows-x64
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Update nightly tag
|
|
run: |
|
|
if [ "$(git rev-parse nightly)" = "$(git rev-parse HEAD)" ]; then
|
|
echo "Nightly tag already points to current commit. Skipping tagging."
|
|
exit 0
|
|
fi
|
|
git config user.name github-actions
|
|
git config user.email github-actions@github.com
|
|
git tag -f nightly
|
|
git push origin nightly --force
|