release-dev.yml

name: Release (develop, bookworm-dev)

# Builds and publishes python3-probe-basic on every push to main.
# Replaces the buildbot's probe_basic_pyqt5_{x86,arm64}_dev_factory.py
# builders + do_apt_bookworm_dev.sh/do_apt_develop.sh.

on:
  push:
    branches:
      - main

jobs:
  build:
    strategy:
      fail-fast: false
      matrix:
        include:
          - arch: amd64
            runner: ubuntu-24.04
          - arch: arm64
            runner: ubuntu-24.04-arm
    runs-on: ${{ matrix.runner }}
    container:
      image: debian:bookworm
    steps:
      - name: Install build prerequisites
        run: |
          apt-get update
          apt-get install -y --no-install-recommends \
            git ca-certificates build-essential devscripts dpkg-dev python3-pip

      - name: Add kcjengr/apt as a build-time package source
        run: |
          echo "deb [trusted=yes] https://raw.githubusercontent.com/kcjengr/apt/main/apt bookworm-dev main" \
            > /etc/apt/sources.list.d/kcjengr.list
          apt-get update

      - name: Checkout source
        uses: actions/checkout@v7
        with:
          path: source
          fetch-depth: 0
          fetch-tags: true

      - name: Install package build-deps
        working-directory: source
        run: |
          apt-get build-dep -y .
          pip install --break-system-packages "poetry-dynamic-versioning>=1.0.0,<2.0.0"

      - name: Create changelog entry
        working-directory: source
        env:
          EMAIL: lcvette1@gmail.com
        run: |
          LATEST_TAG="$(git describe --abbrev=0 --tags)"
          COUNT="$(git rev-list --count "${LATEST_TAG}..HEAD")"
          VERSION="${LATEST_TAG#v}-${COUNT}.dev"
          rm -f debian/changelog
          dch --create --distribution unstable --package probe-basic \
            --newversion "${VERSION}" "Unstable Release version."

      - name: Build package
        working-directory: source
        env:
          DEB_BUILD_OPTIONS: nocheck
        run: dpkg-buildpackage -b -uc

      - name: Upload built package
        uses: actions/upload-artifact@v7
        with:
          name: probe-basic-bookworm-dev-${{ matrix.arch }}
          path: '*.deb'
          if-no-files-found: error

  publish:
    needs: build
    runs-on: ubuntu-24.04
    steps:
      - name: Download built packages
        uses: actions/download-artifact@v8
        with:
          pattern: probe-basic-bookworm-dev-*
          path: debs
          merge-multiple: true

      - name: Checkout apt repo
        uses: actions/checkout@v7
        with:
          repository: kcjengr/apt
          path: apt-repo
          token: ${{ secrets.APT_REPO_TOKEN }}

      - name: Import GPG signing key
        run: echo "${{ secrets.APT_GPG_PRIVATE_KEY }}" | base64 -d | gpg --batch --import

      - name: Publish suite(s) and push (retries on concurrent-publish races)
        working-directory: apt-repo
        env:
          GPG_KEY_ID: 0CDFCCE0388CFA48
        run: |
          set -euo pipefail
          git config user.name "kcjengr-bot"
          git config user.email "actions@github.com"
          for attempt in 1 2 3 4 5; do
            mkdir -p "apt/pool/main/bookworm-dev"
            cp ../debs/*.deb "apt/pool/main/bookworm-dev/"
          ./scripts/publish-suite.sh bookworm-dev bookworm-dev amd64 arm64
          ./scripts/publish-suite.sh develop      bookworm-dev amd64 arm64

            git add -A
            if git diff --cached --quiet; then
              echo "no changes to publish"
              exit 0
            fi
            git commit -m "Publish probe-basic dev build ${{ github.sha }} (bookworm-dev/develop)"
            if git push; then
              echo "published on attempt ${attempt}"
              exit 0
            fi
            echo "push rejected (attempt ${attempt}/5) -- another repo published to kcjengr/apt at the same time, re-syncing and retrying"
            branch="$(git rev-parse --abbrev-ref HEAD)"
            git fetch origin "$branch"
            git reset --hard "origin/$branch"
            sleep $(( (RANDOM % 8) + attempt * 2 ))
          done
          echo "::error::failed to push to kcjengr/apt after 5 attempts"
          exit 1