ci: add deploy script

Author: bastimeyer

.github/workflows/main.yml

@@ -132,7 +132,24 @@ jobs:
             --temp .\temp `
             --precompile `
             --zip "python-${{ steps.vars.outputs.git_version }}-windows-${{ matrix.arch }}-embed.zip"
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v3
         with:
           name: python-${{ steps.vars.outputs.git_version }}-windows-${{ matrix.arch }}-embed
           path: ./*.zip
+
+  deploy:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    needs:
+      - build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+      - run: mkdir dist
+      - uses: actions/download-artifact@v3
+        with:
+          path: ./dist
+      - run: ./deploy.sh ./dist/**/*.zip
+        env:
+          RELEASES_API_KEY: ${{ secrets.GITHUB_TOKEN }}

deploy.sh

@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+set -eo pipefail
+
+[[ "${CI}" ]] && [[ "${GITHUB_REPOSITORY}" ]] && [[ "${GITHUB_REF}" =~ ^refs/tags/ ]] && [[ "${RELEASES_API_KEY}" ]] || exit 1
+
+ROOT=$(git rev-parse --show-toplevel 2>/dev/null || dirname "$(readlink -f "${0}")")
+FILES=("${@}")
+
+declare -A DEPS=(
+  [curl]=curl
+  [jq]=jq
+)
+
+# ----
+
+SELF=$(basename "$(readlink -f "${0}")")
+log() {
+  echo "[${SELF}] $@"
+}
+err() {
+  log >&2 "$@"
+  exit 1
+}
+
+for dep in "${!DEPS[@]}"; do
+  command -v "${dep}" 2>&1 >/dev/null || err "Missing dependency: ${DEPS["${dep}"]}"
+done
+
+[[ $# == 0 ]] && err "Missing file(s)"
+
+# ----
+
+TAG="${GITHUB_REF/#refs\/tags\//}"
+CURL_OPTIONS=(
+  -H "Accept: application/vnd.github.v3+json"
+  -H "User-Agent: ${GITHUB_REPOSITORY}"
+  -H "Authorization: token ${RELEASES_API_KEY}"
+)
+GH_API="https://api.github.com/repos/${GITHUB_REPOSITORY}"
+GH_UPLOAD="https://uploads.github.com/repos/${GITHUB_REPOSITORY}"
+
+get_release_id() {
+  curl -fsSL \
+    -X GET \
+    "${CURL_OPTIONS[@]}" \
+    "${GH_API}/releases/tags/${TAG}" \
+    | jq -re ".id"
+}
+
+create_release() {
+  curl -fsSL \
+    -X POST \
+    "${CURL_OPTIONS[@]}" \
+    -d "{\"tag_name\":\"${TAG}\",\"name\":\"${GITHUB_REPOSITORY} ${TAG}\",\"body\":\"\"}" \
+    "${GH_API}/releases" \
+    | jq -re ".id"
+}
+
+upload_assets() {
+  local release_id="${1}"
+  for path in "${FILES[@]}"; do
+    local file=$(basename "${path}")
+    log "Uploading ${file}"
+    sha256sum "${path}"
+    curl -fsSL \
+      -X POST \
+      "${CURL_OPTIONS[@]}" \
+      -H "Content-Type: application/octet-stream" \
+      --data-binary "@${path}" \
+      "${GH_UPLOAD}/releases/${release_id}/assets?name=${file}" \
+      >/dev/null
+  done
+}
+
+deploy() {
+  log "Getting release ID for tag ${TAG}"
+  local release_id=$(get_release_id 2>/dev/null || true)
+
+  if [[ -z "${release_id}" ]]; then
+    log "Creating new release for tag ${TAG}"
+    local release_id=$(create_release)
+  fi
+
+  if [[ -z "${release_id}" ]]; then
+    err "Missing release ID"
+  fi
+
+  log "Uploading assets to release ${release_id}"
+  upload_assets "${release_id}"
+
+  log "Done"
+}
+
+deploy