Feature/release automation

.github/workflows/build.yml

@@ -1,6 +1,14 @@
 name: Build
 
-on: [push, workflow_dispatch]
+on:
+  pull_request:
+  push:
+  workflow_call:
+    outputs:
+      artifact_name:
+        description: Name of the sanoid-portable artifact uploaded during the build.
+        value: ${{ jobs.build.outputs.artifact_name }}
+  workflow_dispatch:
 
 jobs:
   build:
@@ -10,8 +18,10 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+
       - name: Initialize build environment
         run: ./init.sh
+
       - name: Build sanoid-portable binary
         run: |
           # Build on Ubuntu
@@ -22,9 +32,11 @@ jobs:
           sudo update-binfmts --install APE /bin/sh --magic MZqFpD
 
           ./build.sh
+
       - name: Set artifact name
         id: set_artifact_name
         run: echo "artifact_name=sanoid-portable.${{ github.sha }}.${{ github.run_number }}" >> $GITHUB_OUTPUT
+
       - name: Upload built sanoid-portable artifact
         uses: actions/upload-artifact@v4
         with:
@@ -39,10 +51,12 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+
       - name: Download sanoid-portable artifact
         uses: actions/download-artifact@v4
         with:
           name: ${{ needs.build.outputs.artifact_name }}
+
       - name: Test on Ubuntu
         run: |
           # Test on Ubuntu
@@ -53,6 +67,7 @@ jobs:
           sudo update-binfmts --install APE /bin/sh --magic MZqFpD
 
           ./test.sh
+
       - name: Test in FreeBSD
         uses: vmactions/freebsd-vm@v1
         with:

.github/workflows/release.yml

@@ -0,0 +1,67 @@
+name: Release
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  call-build-workflow:
+    uses: ./.github/workflows/build.yml
+
+  release:
+    runs-on: ubuntu-latest
+    needs: call-build-workflow
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Download sanoid-portable artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ needs.call-build-workflow.outputs.artifact_name }}
+
+      - name: Assert Changelog updated for release version
+        run: |
+          version='${{ github.event.release.tag_name }}'
+          version_heading="## $version"
+
+          if ! grep -q "$version_heading" CHANGELOG.md; then
+            echo "Error: CHANGELOG.md does not appear to contain release notes for \"$version\". A heading matching \"$version_heading\" was not found."
+            exit 1
+          fi
+
+          echo "Ok: CHANGELOG.md contains release notes for \"$version\"."
+
+      - name: Assert sanoid-portable version matches GitHub Release version
+        run: |
+          sudo update-binfmts --install APE /bin/sh --magic MZqFpD
+
+          sudo chmod +x sanoid-portable
+          sanoid_version=$(./sanoid-portable --version)
+          release_version="${{ github.event.release.tag_name }}"
+
+          echo "GitHub Release: $release_version"
+          echo "sanoid-portable: $sanoid_version"
+
+          if [ "$release_version" != "$sanoid_version" ]; then
+            echo "Error: GitHub Release version \"$release_version\" does not match sanoid-portable version \"$sanoid_version\"."
+            exit 1
+          fi
+
+          echo 'Ok: sanoid-portable version matches GitHub release version.'
+          sha256sum sanoid-portable
+
+      - uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: sanoid-portable
+
+      - name: Upload sanoid-portable to GitHub Release assets
+        uses: softprops/action-gh-release@v2
+        with:
+          files: sanoid-portable
+          tag_name: ${{ github.event.release.tag_name }}
+          fail_on_unmatched_files: true

CHANGELOG.md

@@ -3,4 +3,6 @@
 
 ## 2.2.0-1
 
-Initial sanoid-portable release using Sanoid [v2.2.0](https://github.com/jimsalterjrs/sanoid/tree/v2.2.0).
+Initial sanoid-portable release.
+
+Uses Sanoid [v2.2.0](https://github.com/jimsalterjrs/sanoid/releases/tag/v2.2.0).