SwiftLint/.github/workflows/release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Release version'
        required: true
        type: string
      title:
        description: 'Release title'
        required: true
        type: string

env:
  DEVELOPER_DIR: /Applications/Xcode_26.0.1.app
  RELEASE_BRANCH: release/${{ inputs.version }}
  MIMALLOC_VERSION: 3.0.10

jobs:
  setup-credentials:
    name: Setup Actor Credentials
    uses: ./.github/workflows/actor-credentials.yml
    with:
      actor: ${{ github.actor }}
    permissions:
      contents: write
    secrets: inherit

  prepare-release:
    name: Prepare Release
    runs-on: ubuntu-slim
    needs: setup-credentials
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          persist-credentials: true
      - name: Checkout or create release branch
        run: |
          if git ls-remote --exit-code --heads origin ${{ env.RELEASE_BRANCH }}; then
            git fetch origin ${{ env.RELEASE_BRANCH }}:${{ env.RELEASE_BRANCH }}
            git checkout ${{ env.RELEASE_BRANCH }}
          else
            git checkout -b ${{ env.RELEASE_BRANCH }}
          fi
      - name: Update changelog
        run: "sed -i 's/## Main/## ${{ inputs.version }}: ${{ inputs.title }}/g' CHANGELOG.md"
      - name: Update built-in versions
        run: |
          sed 's/__VERSION__/${{ inputs.version }}/g' tools/Version.swift.template > Source/SwiftLintFramework/Models/Version.swift
          sed -i -e '3s/.*/    version = "${{ inputs.version }}",/' MODULE.bazel
          sed -i -e "s/^\(\s*s\.version\s*=\s*'\)[^']*'/\1${{ inputs.version }}'/" SwiftLint.podspec
      - name: Configure Git author
        uses: Homebrew/actions/git-user-config@main
        with:
          token: ${{ secrets[format('PERSONAL_GITHUB_TOKEN_{0}', needs.setup-credentials.outputs.author_uppercase)] }}
      - name: Commit changes
        id: pre_release
        run: |
          git commit -a -m "Prepare ${{ inputs.version }} release"
          git push origin HEAD

  verify-podspec:
    name: Verify Podspec
    runs-on: macOS-14
    permissions:
      contents: read
    env:
      DEVELOPER_DIR: /Applications/Xcode_15.0.1.app # Supports iOS 17.0 simulator selected by CocoaPods.
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          persist-credentials: false
      - name: Set up Ruby and Bundler
        uses: ruby/setup-ruby@d5f787ce339eb0767271bc01d922e85644c2c8ab # v1.280.0
        with:
          bundler-cache: true
      - name: Lint Podspec # Make sure Podspec still builds okay on CI with old release.
        run: |
          if ! grep -q 'DEVELOPER_DIR: ${{ env.DEVELOPER_DIR }}' .github/workflows/post-release.yml; then
            echo "ERROR: Xcode version not in sync with post-release workflow"
            exit 1
          fi
          make pod_lint

  build-linux:
    name: Build Linux ${{ matrix.arch }} Binary
    needs: prepare-release
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - arch: AMD64
            runner: ubuntu-24.04
            artifact_name: swiftlint-linux-amd64
          - arch: ARM64
            runner: ubuntu-24.04-arm
            artifact_name: swiftlint-linux-arm64
    permissions:
      contents: read
    steps:
      - &checkout-release-branch
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          ref: ${{ env.RELEASE_BRANCH }}
          persist-credentials: false
      - name: Install dependencies
        run: sudo apt-get install -y libcurl4-openssl-dev libxml2-dev
      - name: Build binary
        run: make --debug spm_linux_build
      - name: Upload binary
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ matrix.artifact_name }}
          path: .build/release/swiftlint

  build-static-linux:
    name: Build Static Linux ${{ matrix.arch }} Binary
    needs: prepare-release
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - arch: ARM64
            runner: ubuntu-24.04-arm
            swift_sdk: aarch64-swift-linux-musl
            artifact_name: swiftlint-static-arm64
          - arch: AMD64
            runner: ubuntu-24.04
            swift_sdk: x86_64-swift-linux-musl
            artifact_name: swiftlint-static-amd64
    permissions:
      contents: read
    env:
      BINARY_PATH: .build/${{ matrix.swift_sdk }}/release/swiftlint
    steps:
      - *checkout-release-branch
      - name: Install SDK
        run: swift sdk install https://download.swift.org/swift-6.2.3-release/static-sdk/swift-6.2.3-RELEASE/swift-6.2.3-RELEASE_static-linux-0.0.1.artifactbundle.tar.gz --checksum f30ec724d824ef43b5546e02ca06a8682dafab4b26a99fbb0e858c347e507a2c
      - name: Build mimalloc object
        run: |
          set -euxo pipefail
          curl -sSfL "https://github.com/microsoft/mimalloc/archive/refs/tags/v${{ env.MIMALLOC_VERSION }}.tar.gz" | tar xz
          export CC=clang
          cmake -S "mimalloc-${{ env.MIMALLOC_VERSION }}" -B mimalloc-build \
            -DMI_BUILD_SHARED=OFF \
            -DMI_BUILD_STATIC=ON \
            -DMI_BUILD_OBJECT=OFF \
            -DCMAKE_BUILD_TYPE=Release
          cmake --build mimalloc-build --target mimalloc-static
          cp mimalloc-${{ env.MIMALLOC_VERSION }}/LICENSE LICENSE.mimalloc
      - name: Build static binary
        run: |
          # To improve performance with musl, increase the stack size to 512KiB and
          # replace musl's default allocator with mimalloc.
          swift build \
            -c release \
            --product swiftlint \
            --swift-sdk ${{ matrix.swift_sdk }} \
            -Xswiftc -DSWIFTLINT_DISABLE_SOURCEKIT \
            -Xlinker -z -Xlinker stack-size=0x80000 \
            -Xlinker --whole-archive \
            -Xlinker ./mimalloc-build/libmimalloc.a \
            -Xlinker --no-whole-archive
          cp "${{ env.BINARY_PATH }}" .
      - name: Strip binary
        run: strip -s swiftlint
      - name: Upload artifact
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ matrix.artifact_name }}
          path: |
            swiftlint
            LICENSE.mimalloc

  build-macos:
    name: Build macOS Binaries
    needs: prepare-release
    runs-on: macOS-26
    permissions:
      contents: read
    steps:
      - *checkout-release-branch
      - name: Build SwiftLint for macOS
        run: make --debug bazel_release
      - name: Upload build artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: swiftlint-macos
          path: |
            swiftlint
            bazel.tar.gz
            bazel.tar.gz.sha256
          retention-days: 2
          if-no-files-found: error

  create-release:
    name: Create Release
    needs:
      - setup-credentials
      - prepare-release
      - build-linux
      - build-static-linux
      - build-macos
    runs-on: macOS-26
    permissions:
      actions: read
      contents: write
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          ref: ${{ env.RELEASE_BRANCH }}
          persist-credentials: true
      - name: Configure author
        uses: Homebrew/actions/git-user-config@main
        with:
          token: ${{ secrets[format('PERSONAL_GITHUB_TOKEN_{0}', needs.setup-credentials.outputs.author_uppercase)] }}
      - name: Download binary artifacts
        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
      - name: Move artifacts
        run: |
          mv -f swiftlint-macos/* .
          mv -f swiftlint-linux-amd64/swiftlint swiftlint_linux_amd64
          mv -f swiftlint-linux-arm64/swiftlint swiftlint_linux_arm64
          mv -f swiftlint-static-amd64/swiftlint swiftlint_static_amd64
          mv -f swiftlint-static-arm64/swiftlint swiftlint_static_arm64

          # Just pick one of the licenses.
          mv -f swiftlint-static-amd64/LICENSE.mimalloc .
      - name: Make binaries executable
        run: chmod +x swiftlint*
      - name: Create artifacts
        run: |
          make --debug spm_artifactbundle
          make --debug package
          make --debug portable_zip
          make --debug zip_linux_release
      - name: Update binary target in Swift package
        run: ./tools/update-artifact-bundle.sh "${{ inputs.version }}"
      - name: Create tag and release commit
        run: |
          git commit -a -m "Release ${{ inputs.version }}"
          git tag -a "${{ inputs.version }}" -m "${{ inputs.title }}"
          git push origin HEAD
          git push origin "${{ inputs.version }}"
      - name: Create release
        run: ./tools/create-github-release.sh "${{ inputs.version }}"
        env:
          GITHUB_TOKEN: ${{ secrets[format('PERSONAL_GITHUB_TOKEN_{0}', needs.setup-credentials.outputs.author_uppercase)] }}
      - name: Add new changelog section
        run: |
          ./tools/add-new-changelog-section.sh
          git commit -a -m "Add new changelog section"
          git push origin HEAD