c-toxcore/.github/workflows/deploy.yml

name: deploy

on:
  # Allow manual trigger.
  workflow_dispatch:
  pull_request:
    branches: ["master"]
  push:
    branches: ["master"]
    tags: ["v*"]

# Cancel old PR builds when pushing new commits.
concurrency:
  group: deploy-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

jobs:

  ################################################################################################
  # Preparation jobs
  ################################################################################################

  update-nightly-tag:
    name: Update nightly release tag
    runs-on: ubuntu-24.04
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - name: Move nightly tag to head for nightly release
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        run: git tag -f nightly && git push origin nightly -f

  ################################################################################################
  # Build and deploy jobs (PR and push)
  ################################################################################################

  build-linux:
    name: Linux
    needs: [update-nightly-tag]
    strategy:
      matrix:
        arch: [aarch64, x86_64]
    runs-on: ${{ matrix.arch == 'aarch64' && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Install build tools
        run: sudo apt-get install -y --no-install-recommends ninja-build yasm
      - name: Cache dependencies
        uses: actions/cache@v4
        with:
          path: deps-prefix-linux-${{ matrix.arch }}
          key: ${{ github.job }}-${{ matrix.arch }}-deps
      - name: Run build
        run: other/deploy/linux.sh "${{ matrix.arch }}"
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-linux-${{ matrix.arch }}
          path: toxcore-linux-${{ matrix.arch }}
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-linux-${{ matrix.arch }}.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          tar zcf "${{ steps.get_version.outputs.release_tarball }}" toxcore-linux-${{ matrix.arch }}
          sha256sum "${{ steps.get_version.outputs.release_tarball }}" >"${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }},${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Create tarball for nightly upload
        run: |
          tar zcf toxcore-nightly-linux-${{ matrix.arch }}.tar.gz toxcore-linux-${{ matrix.arch }}
          sha256sum toxcore-nightly-linux-${{ matrix.arch }}.tar.gz >toxcore-nightly-linux-${{ matrix.arch }}.tar.gz.sha256
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-linux-${{ matrix.arch }}.tar.gz,toxcore-nightly-linux-${{ matrix.arch }}.tar.gz.sha256"

  build-macos:
    name: macOS
    needs: [update-nightly-tag]
    strategy:
      matrix:
        arch: [arm64, x86_64]
    runs-on: ${{ matrix.arch == 'arm64' && 'macos-14' || 'macos-13' }}
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Cache dependencies
        uses: actions/cache@v4
        with:
          path: deps-prefix-macos-${{ matrix.arch }}
          key: ${{ github.job }}-${{ matrix.arch }}-deps
      - name: Run build
        run: other/deploy/macos.sh "${{ matrix.arch }}"
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-macos-${{ matrix.arch }}
          path: toxcore-macos-${{ matrix.arch }}
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-macos-${{ matrix.arch }}.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          tar zcf "${{ steps.get_version.outputs.release_tarball }}" toxcore-macos-${{ matrix.arch }}
          shasum -a 256 "${{ steps.get_version.outputs.release_tarball }}" >"${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }},${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Create tarball for nightly upload
        run: |
          tar zcf toxcore-nightly-macos-${{ matrix.arch }}.tar.gz toxcore-macos-${{ matrix.arch }}
          shasum -a 256 toxcore-nightly-macos-${{ matrix.arch }}.tar.gz >toxcore-nightly-macos-${{ matrix.arch }}.tar.gz.sha256
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-macos-${{ matrix.arch }}.tar.gz,toxcore-nightly-macos-${{ matrix.arch }}.tar.gz.sha256"

  build-ios:
    name: iOS
    needs: [update-nightly-tag]
    strategy:
      matrix:
        target: [ios-arm64, ios-armv7, ios-armv7s, iphonesimulator-arm64, iphonesimulator-x86_64]
    runs-on: 'macos-14'
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Cache dependencies
        uses: actions/cache@v4
        with:
          path: deps-prefix-${{ matrix.target }}
          key: ${{ github.job }}-${{ matrix.target }}-deps
      - name: Run build
        run: other/deploy/ios.sh "${{ matrix.target }}"
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-${{ matrix.target }}
          path: toxcore-${{ matrix.target }}
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-${{ matrix.target }}.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          tar zcf "${{ steps.get_version.outputs.release_tarball }}" toxcore-${{ matrix.target }}
          shasum -a 256 "${{ steps.get_version.outputs.release_tarball }}" >"${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }},${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Create tarball for nightly upload
        run: |
          tar zcf toxcore-nightly-${{ matrix.target }}.tar.gz toxcore-${{ matrix.target }}
          shasum -a 256 toxcore-nightly-${{ matrix.target }}.tar.gz >toxcore-nightly-${{ matrix.target }}.tar.gz.sha256
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-${{ matrix.target }}.tar.gz,toxcore-nightly-${{ matrix.target }}.tar.gz.sha256"

  build-xcode-framework:
    name: Xcode Framework
    needs: [build-ios, build-macos]
    runs-on: 'macos-14'
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Download artifact for ios
        uses: actions/download-artifact@v4
        with:
          pattern: toxcore-ios-*
      - name: Download artifact for iphonesimulator
        uses: actions/download-artifact@v4
        with:
          pattern: toxcore-iphonesimulator-*
      - name: Download artifact for macos
        uses: actions/download-artifact@v4
        with:
          pattern: toxcore-macos-*
      - name: Run build
        run: |
          mv toxcore-* other/deploy/apple/
          other/deploy/apple/make-framework.sh
          tar -C other/deploy/apple -zcf toxcore-xcframework.tar.gz Tox.xcframework
          shasum -a 256 toxcore-xcframework.tar.gz >toxcore-xcframework.tar.gz.sha256
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-xcframework
          path: Tox.xcframework
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-xcframework.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          cp toxcore-xcframework.tar.gz        "${{ steps.get_version.outputs.release_tarball }}"
          cp toxcore-xcframework.tar.gz.sha256 "${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }},${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Create tarball for nightly upload
        run: |
          cp toxcore-xcframework.tar.gz        toxcore-nightly-xcframework.tar.gz
          cp toxcore-xcframework.tar.gz.sha256 toxcore-nightly-xcframework.tar.gz.sha256
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-xcframework.tar.gz,toxcore-nightly-xcframework.tar.gz.sha256"

  build-android:
    name: Android
    needs: [update-nightly-tag]
    strategy:
      matrix:
        arch: [armeabi-v7a, arm64-v8a, x86, x86_64]
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
      - name: Cache dependencies
        uses: actions/cache@v4
        with:
          path: deps-prefix-android-${{ matrix.arch }}
          key: ${{ github.job }}-${{ matrix.arch }}-deps
      - name: Run build
        run: other/deploy/android.sh "${{ matrix.arch }}"
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-android-${{ matrix.arch }}
          path: toxcore-android-${{ matrix.arch }}
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-android-${{ matrix.arch }}.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          tar zcf "${{ steps.get_version.outputs.release_tarball }}" toxcore-android-${{ matrix.arch }}
          sha256sum "${{ steps.get_version.outputs.release_tarball }}" >"${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }},${{ steps.get_version.outputs.release_tarball }}.sha256"
      - name: Create tarball for nightly upload
        run: |
          tar zcf toxcore-nightly-android-${{ matrix.arch }}.tar.gz toxcore-android-${{ matrix.arch }}
          sha256sum toxcore-nightly-android-${{ matrix.arch }}.tar.gz >toxcore-nightly-android-${{ matrix.arch }}.tar.gz.sha256
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-android-${{ matrix.arch }}.tar.gz,toxcore-nightly-android-${{ matrix.arch }}.tar.gz.sha256"

  build-wasm:
    name: WebAssembly
    needs: [update-nightly-tag]
    runs-on: ubuntu-24.04
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Login to DockerHub
        if: ${{ github.event_name == 'push' }}
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          file: other/docker/wasm/wasm.Dockerfile
          push: ${{ github.event_name == 'push' }}
          tags: toxchat/c-toxcore:wasm
          cache-from: type=registry,ref=toxchat/c-toxcore:wasm
          cache-to: type=inline
          outputs: type=docker
      - name: Extract wasm build
        run: docker run --rm --entrypoint tar toxchat/c-toxcore:wasm -C /wasm/bin -c libtoxcore.js libtoxcore.wasm >toxcore-wasm.tar
      - name: Upload artifacts
        uses: actions/upload-artifact@v4
        with:
          name: toxcore-wasm.tar
          path: toxcore-wasm.tar
      - name: Compress tarball
        run: gzip toxcore-wasm.tar
      - name: Get tag name for release file name
        if: contains(github.ref, 'refs/tags/v')
        id: get_version
        run: |
          VERSION="$(echo "$GITHUB_REF" | cut -d / -f 3)"
          echo "release_tarball=toxcore-$VERSION-wasm.tar.gz" >>$GITHUB_OUTPUT
      - name: Create tarball for release upload
        if: contains(github.ref, 'refs/tags/v')
        run: |
          cp toxcore-wasm.tar.gz "${{ steps.get_version.outputs.release_tarball }}"
      - name: Upload to versioned release
        if: contains(github.ref, 'refs/tags/v')
        uses: ncipollo/release-action@v1
        with:
          allowUpdates: true
          draft: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "${{ steps.get_version.outputs.release_tarball }}"
      - name: Create tarball for nightly upload
        run: |
          cp toxcore-wasm.tar.gz toxcore-nightly-wasm.tar.gz
      - name: Upload to nightly release
        uses: ncipollo/release-action@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/master'
        with:
          allowUpdates: true
          tag: nightly
          omitBodyDuringUpdate: true
          omitNameDuringUpdate: true
          prerelease: true
          replacesArtifacts: true
          token: ${{ secrets.GITHUB_TOKEN }}
          artifacts: "toxcore-nightly-wasm.tar.gz"