Update build.yaml

.github/workflows/build.yaml

@@ -25,82 +25,17 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
       - name: Install npm modules
         run: npm i
-      - name: Test
-        run: npm test
       - name: Grunt
         run: grunt
       - name: Upload artifact
         uses: actions/upload-artifact@v1
         with:
           name: KeeWeb-${{ steps.get_tag.outputs.tag }}.html
           path: dist
-      - name: Write secrets
-        env:
-          VIRUS_TOTAL: ${{ secrets.VIRUS_TOTAL }}
-        run: |
-          mkdir keys
-          echo "$VIRUS_TOTAL" > keys/virus-total.json
       - name: Check on VirusTotal
         run: grunt virustotal
         if: ${{ github.repository == 'keeweb/keeweb' }}
 
-  linux:
-    runs-on: ubuntu-latest
-    needs:
-      - web
-    steps:
-      - name: Get current git tag
-        id: get_tag
-        uses: keeweb/[email protected]
-        with:
-          tagRegex: "^v(\\d+\\.\\d+\\.\\d+)$"
-          tagRegexGroup: 1
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          repository: keeweb/keeweb
-          ref: ${{ github.repository == 'keeweb/keeweb' && github.sha || 'develop' }}
-      - name: Download artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.html
-          path: dist
-      - name: Write secrets
-        env:
-          PRIVATE_KEY: ${{ secrets.PRIVATE_KEY }}
-          KEEWEB_SIGN: ${{ secrets.KEEWEB_SIGN }}
-        run: |
-          mkdir keys
-          echo "$PRIVATE_KEY" > keys/private-key.pem
-          echo "$KEEWEB_SIGN" > keys/keeweb-sign.json
-      - name: Build in Docker
-        uses: ./.github/actions/linux-build
-      - name: Upload AppImage artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.AppImage
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.AppImage
-      - name: Upload snap artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.snap
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.snap
-      - name: Upload deb artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.deb
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.deb
-      - name: Upload zip artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.zip
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.zip
-      - name: Upload rpm artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x86_64.rpm
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x86_64.rpm
-
   darwin:
     runs-on: macos-latest
     needs:
@@ -131,22 +66,6 @@ jobs:
         run: npm i
       - name: Install grunt
         run: sudo npm i -g grunt-cli
-      - name: Write secrets
-        env:
-          CODESIGN: ${{ secrets.CODESIGN }}
-          APPLE_DEPLOY_PASSWORD: ${{ secrets.APPLE_DEPLOY_PASSWORD }}
-          APPLE_ID_USERNAME: ${{ secrets.APPLE_ID_USERNAME }}
-          APPLE_PROVISIONING_PROFILE: ${{ secrets.APPLE_PROVISIONING_PROFILE }}
-        run: |
-          mkdir keys
-          echo "$CODESIGN" > keys/codesign.json
-          xcrun altool --store-password-in-keychain-item "AC_PASSWORD" -u "$APPLE_ID_USERNAME" -p "$APPLE_DEPLOY_PASSWORD"
-          echo "$APPLE_PROVISIONING_PROFILE" | base64 -d > keys/keeweb.provisionprofile
-      - name: Import certificates
-        uses: keeweb/import-codesign-certs@v1
-        with:
-          p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
-          p12-password: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
       - name: Grunt
         run: grunt --max-old-space-size=4096 desktop-darwin ${{ github.repository != 'keeweb/keeweb' && '--skip-sign' || '' }}
       - name: Upload x64 dmg artifact
@@ -159,268 +78,3 @@ jobs:
         with:
           name: KeeWeb-${{ steps.get_tag.outputs.tag }}.mac.arm64.dmg
           path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.mac.arm64.dmg
-
-  win32:
-    runs-on: windows-latest
-    needs:
-      - web
-    steps:
-      - name: Get current git tag
-        id: get_tag
-        uses: keeweb/[email protected]
-        with:
-          tagRegex: "^v(\\d+\\.\\d+\\.\\d+)$"
-          tagRegexGroup: 1
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          repository: keeweb/keeweb
-          ref: ${{ github.repository == 'keeweb/keeweb' && github.sha || 'develop' }}
-      - name: Download artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.html
-          path: dist
-      - name: Upgrade Node.js
-        uses: actions/setup-node@v2
-        with:
-          node-version: '16'
-          registry-url: 'https://registry.npmjs.org'
-      - name: Install npm modules
-        run: npm i
-      - name: Install grunt
-        run: npm i -g grunt-cli
-      - name: Write secrets
-        env:
-          CODESIGN: ${{ secrets.CODESIGN }}
-          MS_CODESIGN_PRIVATE_KEY_CLIENT: ${{ secrets.MS_CODESIGN_PRIVATE_KEY_CLIENT }}
-          MS_CODESIGN_PUBLIC_KEY_CLIENT: ${{ secrets.MS_CODESIGN_PUBLIC_KEY_CLIENT }}
-          MS_CODESIGN_PUBLIC_KEY_SERVER: ${{ secrets.MS_CODESIGN_PUBLIC_KEY_SERVER }}
-        run: |
-          mkdir keys
-          echo $Env:CODESIGN > keys/codesign.json
-          mkdir keys/code-signing
-          echo $Env:MS_CODESIGN_PRIVATE_KEY_CLIENT > keys/code-signing/private-key-client.pem
-          echo $Env:MS_CODESIGN_PUBLIC_KEY_CLIENT > keys/code-signing/public-key-client.pem
-          echo $Env:MS_CODESIGN_PUBLIC_KEY_SERVER > keys/code-signing/public-key-server.pem
-      - name: Grunt
-        run: grunt desktop-win32 ${{ github.repository != 'keeweb/keeweb' && '--skip-sign' || '' }}
-      - name: Upload ia32 exe artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.exe
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.exe
-      - name: Upload ia32 zip artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.zip
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.zip
-      - name: Upload x64 exe artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.exe
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.exe
-      - name: Upload x64 zip artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.zip
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.zip
-      - name: Upload arm64 exe artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.exe
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.exe
-      - name: Upload arm64 zip artifact
-        uses: actions/upload-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.zip
-          path: dist/desktop/KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.zip
-
-  publish:
-    runs-on: ubuntu-latest
-    needs:
-      - linux
-      - darwin
-      - win32
-    steps:
-      - name: Get current git tag
-        id: get_tag
-        uses: keeweb/[email protected]
-        with:
-          tagRegex: "^v(\\d+\\.\\d+\\.\\d+)$"
-          tagRegexGroup: 1
-      - name: Setup GCloud
-        uses: google-github-actions/[email protected]
-        with:
-          version: '285.0.0'
-          service_account_key: ${{ secrets.GCP_SA_KEY }}
-          export_default_credentials: true
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          repository: keeweb/keeweb
-          path: keeweb
-          ref: ${{ github.repository == 'keeweb/keeweb' && github.sha || 'develop' }}
-      - name: Upgrade Node.js
-        uses: actions/setup-node@v2
-        with:
-          node-version: '16'
-          registry-url: 'https://registry.npmjs.org'
-      - name: Install npm modules
-        working-directory: keeweb
-        run: npm i
-      - name: Download html artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.html
-          path: html
-      - name: Download linux.AppImage artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.AppImage
-          path: assets
-      - name: Download linux.snap artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.snap
-          path: assets
-      - name: Download linux.deb artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.deb
-          path: assets
-      - name: Download linux.zip artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x64.zip
-          path: assets
-      - name: Download linux.rpm artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.linux.x86_64.rpm
-          path: assets
-      - name: Download darwin.x64.dmg artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.mac.x64.dmg
-          path: assets
-      - name: Download darwin.arm64.dmg artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.mac.arm64.dmg
-          path: assets
-      - name: Download win32.ia32.exe artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.exe
-          path: assets
-      - name: Download win32.ia32.zip artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.ia32.zip
-          path: assets
-      - name: Download win32.x64.exe artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.exe
-          path: assets
-      - name: Download win32.x64.zip artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.x64.zip
-          path: assets
-      - name: Download win32.arm64.exe artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.exe
-          path: assets
-      - name: Download win32.arm64.zip artifact
-        uses: actions/download-artifact@v1
-        with:
-          name: KeeWeb-${{ steps.get_tag.outputs.tag }}.win.arm64.zip
-          path: assets
-      - name: Zip html
-        working-directory: html
-        run: zip -vr ../assets/KeeWeb-${{ steps.get_tag.outputs.tag }}.html.zip .
-      - name: Copy assets to dist
-        run: mkdir -p keeweb/dist/desktop && cp assets/* keeweb/dist/desktop
-      - name: Write secrets
-        env:
-          PRIVATE_KEY: ${{ secrets.PRIVATE_KEY }}
-          KEEWEB_SIGN: ${{ secrets.KEEWEB_SIGN }}
-        working-directory: keeweb
-        run: |
-          mkdir keys
-          echo "$PRIVATE_KEY" > keys/private-key.pem
-          echo "$KEEWEB_SIGN" > keys/keeweb-sign.json
-      - name: Grunt
-        working-directory: keeweb
-        run: grunt finish-release
-      - name: Copy signatures to assets
-        run: cp keeweb/dist/desktop/Verify.sign.sha256 assets
-      - name: Copy checksums to assets
-        run: cp keeweb/dist/desktop/Verify.sha256 assets
-      - name: Login to DockerHub Registry
-        env:
-          DOCKERHUB_ACCESS_TOKEN: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
-        run: echo $DOCKERHUB_ACCESS_TOKEN | docker login -u $DOCKERHUB_USERNAME --password-stdin
-      - name: Copy dist to the Docker context
-        run: cp -r html keeweb/package/docker/dist
-      - name: Build the Docker image
-        working-directory: keeweb
-        run: docker build -t antelle/keeweb:latest -t antelle/keeweb:${{ steps.get_tag.outputs.tag }} package/docker
-      - name: Push the Docker image to dockerhub
-        if: ${{ github.repository == 'keeweb/keeweb' }}
-        run: docker push --all-tags antelle/keeweb
-      - name: Extract release notes
-        run: node util/extract-release-notes.js --version=${{ steps.get_tag.outputs.tag }} --output=tmp/release-body.md
-        working-directory: keeweb
-      - name: Publish GitHub release
-        uses: softprops/action-gh-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          tag_name: v${{ steps.get_tag.outputs.tag }}
-          name: Desktop apps v${{ steps.get_tag.outputs.tag }}
-          files: assets/*
-          body_path: keeweb/tmp/release-body.md
-      - name: Checkout gh-pages
-        uses: actions/checkout@v2
-        with:
-          ref: gh-pages
-          path: gh-pages
-          fetch-depth: 0
-      - name: Commit dist to gh-pages
-        working-directory: gh-pages
-        run: |
-          git rm -r '*'
-          cp -r ../html/* .
-          mkdir -p .github/workflows
-          echo $GITHUB_SHA > build.txt
-          date >> build.txt
-          git add .
-          git config --local user.email "[email protected]"
-          git config --local user.name "GitHub Action"
-          git commit -am v${{ steps.get_tag.outputs.tag }}
-      - name: Push gh-pages
-        uses: keeweb/github-push-action@master
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          branch: gh-pages
-          directory: gh-pages
-      - name: Restore git mtime
-        working-directory: gh-pages
-        run: python3 ../keeweb/.github/actions/scripts/git-restore-mtime.py
-      - name: Sync the website
-        if: ${{ github.repository == 'keeweb/keeweb' }}
-        run: gsutil -m rsync -r -d -x "^\." gh-pages gs://app.keeweb.info/
-      - name: Purge CloudFlare cache
-        if: ${{ github.repository == 'keeweb/keeweb' }}
-        env:
-          CF_TOKEN: ${{ secrets.CF_TOKEN }}
-        run: |
-          curl -sS -X POST "https://api.cloudflare.com/client/v4/zones/dbda8e7e454d23edb08d4bc3b3f6f872/purge_cache" \
-            -H "Authorization: Bearer $CF_TOKEN" \
-            -H "Content-Type: application/json" \
-            --data '{"purge_everything":true}'