gopher64/.github/workflows/build.yml

name: Rust
permissions:
  contents: read

on:
  push:
    branches: [ "main" ]
    tags:
      - "v*"
  pull_request:
    branches: [ "main" ]

env:
  CARGO_TERM_COLOR: always
  RA_HARDCORE: ${{ github.ref_type == 'tag' && 'true' || 'false' }}

jobs:
  build-linux:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-24.04
            target: x86_64-unknown-linux-gnu
            arch: linux-x86_64
            llvm: X64
          - os: ubuntu-24.04-arm
            target: aarch64-unknown-linux-gnu
            arch: linux-aarch64
            llvm: ARM64
    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 0
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          target: ${{ matrix.target }}
          rustflags: ""
          cache: ${{ github.ref_type != 'tag' }}
      - name: Set LLVM_VERSION
        run: echo "LLVM_VERSION=$(rustc --version --verbose | grep "LLVM version" | cut
          -d':' -f2 | xargs)" >> $GITHUB_ENV
      - name: Install SDL Dependencies
        # https://wiki.libsdl.org/SDL3/README-linux#build-dependencies
        uses: awalsh128/cache-apt-pkgs-action@v1
        with:
          packages: build-essential git make pkg-config cmake ninja-build
            gnome-desktop-testing libasound2-dev libpulse-dev libaudio-dev
            libfribidi-dev libjack-dev libsndio-dev libx11-dev libxext-dev
            libxrandr-dev libxcursor-dev libxfixes-dev libxi-dev libxss-dev
            libxtst-dev libxkbcommon-dev libdrm-dev libgbm-dev libgl1-mesa-dev
            libgles2-mesa-dev libegl1-mesa-dev libdbus-1-dev libibus-1.0-dev
            libudev-dev libthai-dev libpipewire-0.3-dev libwayland-dev
            libdecor-0-dev liburing-dev libfreetype-dev libfontconfig-dev
          version: ${{ matrix.target }}-1.0
      - name: Install LLVM and Clang
        uses: KyleMayes/install-llvm-action@v2
        with:
          version: ${{ env.LLVM_VERSION }}
          force-url: https://github.com/llvm/llvm-project/releases/download/llvmorg-${{
            env.LLVM_VERSION }}/LLVM-${{ env.LLVM_VERSION }}-Linux-${{
            matrix.llvm }}.tar.xz
      - name: Build
        run: |
          cargo build --release -v --target=${{ matrix.target }}
          mkdir output
          cp target/${{ matrix.target }}/release/gopher64 output/gopher64-${{ matrix.arch }}
        env:
          NETPLAY_ID: ${{ secrets.NETPLAY_ID }}
      - name: Upload file
        uses: actions/upload-artifact@v7
        with:
          name: gopher64-${{ matrix.arch }}
          path: output/gopher64-${{ matrix.arch }}
          archive: false
      - name: Setup butler
        if: ${{ github.ref_type == 'tag' }}
        uses: remarkablegames/setup-butler@v3
      - name: Upload to itch.io
        if: ${{ github.ref_type == 'tag' }}
        run: |
          butler push output/gopher64-${{ matrix.arch }} loganmc10/gopher64:${{ matrix.arch }} --userversion ${GITHUB_REF_NAME#v}
        env:
          BUTLER_API_KEY: ${{ secrets.BUTLER_API_KEY }}

  build-windows:
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: windows-2025
            target: x86_64-pc-windows-msvc
            arch: windows-x86_64
            llvm: win64
          - os: windows-11-arm
            target: aarch64-pc-windows-msvc
            arch: windows-aarch64
            llvm: woa64
    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 0
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          target: ${{ matrix.target }}
          rustflags: ""
          cache: ${{ github.ref_type != 'tag' }}
      - name: Set LLVM_VERSION
        run: |
          $llvm_version = rustc --version --verbose | Select-String "LLVM version" | ForEach-Object { $_.Line.Split(":")[1].Trim() }
          echo "LLVM_VERSION=$llvm_version" >> $env:GITHUB_ENV
      - name: Install LLVM and Clang
        uses: KyleMayes/install-llvm-action@v2
        with:
          version: ${{ env.LLVM_VERSION }}
          force-url: https://github.com/llvm/llvm-project/releases/download/llvmorg-${{
            env.LLVM_VERSION }}/LLVM-${{ env.LLVM_VERSION }}-${{ matrix.llvm
            }}.exe
      - name: Build
        run: |
          cargo build --release -v --target=${{ matrix.target }}
          mkdir output
          cp target/${{ matrix.target }}/release/gopher64.exe output/gopher64-${{ matrix.arch }}.exe
        env:
          CC: clang-cl
          CXX: clang-cl
          NETPLAY_ID: ${{ secrets.NETPLAY_ID }}
      - name: Upload unsigned artifact
        id: upload-unsigned-artifact
        uses: actions/upload-artifact@v7
        with:
          name: gopher64-${{ matrix.arch }}
          path: output/gopher64-${{ matrix.arch }}.exe
          archive: ${{ github.ref_type == 'tag' && true || false }}
      - name: SignPath
        if: ${{ github.ref_type == 'tag' }}
        uses: signpath/github-action-submit-signing-request@v2
        with:
          api-token: "${{ secrets.SIGNPATH_API_TOKEN }}"
          organization-id: "${{ secrets.SIGNPATH_ORG_ID }}"
          project-slug: "gopher64"
          artifact-configuration-slug: "gopher64-${{ matrix.arch }}"
          signing-policy-slug: "release-signing"
          github-artifact-id: "${{ steps.upload-unsigned-artifact.outputs.artifact-id }}"
          wait-for-completion: true
          wait-for-completion-timeout-in-seconds: 3600
          output-artifact-directory: output-signed
      - name: Upload signed artifact
        if: ${{ github.ref_type == 'tag' }}
        uses: actions/upload-artifact@v7
        with:
          name: gopher64-${{ matrix.arch }}
          path: output-signed/gopher64-${{ matrix.arch }}.exe
          archive: false
          overwrite: true
      - name: Setup butler
        if: ${{ github.ref_type == 'tag' }}
        uses: remarkablegames/setup-butler@v3
      - name: Upload to itch.io
        if: ${{ github.ref_type == 'tag' }}
        shell: bash
        run: |
          butler push output-signed/gopher64-${{ matrix.arch }}.exe loganmc10/gopher64:${{ matrix.arch }} --userversion ${GITHUB_REF_NAME#v}
        env:
          BUTLER_API_KEY: ${{ secrets.BUTLER_API_KEY }}

  build-macos:
    runs-on: macos-15
    strategy:
      fail-fast: false
      matrix:
        include:
          - target: aarch64-apple-darwin
            arch: macos-aarch64
            llvm: ARM64
    steps:
      - uses: actions/checkout@v6
        with:
          submodules: recursive
          fetch-depth: 0
      - uses: actions-rust-lang/setup-rust-toolchain@v1
        with:
          target: ${{ matrix.target }}
          rustflags: ""
          cache: ${{ github.ref_type != 'tag' }}
      - name: Set LLVM_VERSION
        run: echo "LLVM_VERSION=$(rustc --version --verbose | grep "LLVM version" | cut
          -d':' -f2 | xargs)" >> $GITHUB_ENV
      - name: Install LLVM and Clang
        uses: KyleMayes/install-llvm-action@v2
        with:
          version: ${{ env.LLVM_VERSION }}
          force-url: https://github.com/llvm/llvm-project/releases/download/llvmorg-${{
            env.LLVM_VERSION }}/LLVM-${{ env.LLVM_VERSION }}-macOS-${{
            matrix.llvm }}.tar.xz
      - name: Build
        run: |
          cargo install cargo-bundle
          brew install molten-vk
          cargo build --release --no-default-features -v --target=${{ matrix.target }}
          mv target/${{ matrix.target }}/release/gopher64 target/${{ matrix.target }}/release/gopher64-cli
          cargo bundle --release --target=${{ matrix.target }} --format osx
          cp target/${{ matrix.target }}/release/gopher64-cli target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/MacOS/gopher64-cli
          install_name_tool -change /opt/homebrew/opt/freetype/lib/libfreetype.6.dylib \
            @executable_path/../Frameworks/libfreetype.6.dylib target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/MacOS/gopher64
          install_name_tool -change /opt/homebrew/opt/freetype/lib/libfreetype.6.dylib \
            @executable_path/../Frameworks/libfreetype.6.dylib target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/MacOS/gopher64-cli
          install_name_tool -change /opt/homebrew/opt/libpng/lib/libpng16.16.dylib \
            @executable_path/../Frameworks/libpng16.16.dylib target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/Frameworks/libfreetype.6.dylib
        env:
          NETPLAY_ID: ${{ secrets.NETPLAY_ID }}
          MACOSX_DEPLOYMENT_TARGET: "15.0"
      - name: Sign Bundle Dev
        if: ${{ github.ref_type != 'tag' }}
        run: |
          codesign -f --entitlements data/macos/entitlements_dev.plist --deep --timestamp --options runtime -s - target/${{ matrix.target }}/release/bundle/osx/Gopher64.app
      - name: Import Codesign Certs
        if: ${{ github.ref_type == 'tag' }}
        uses: apple-actions/import-codesign-certs@v6
        with:
          p12-file-base64: ${{ secrets.APPLE_CERTIFICATES_FILE_BASE64 }}
          p12-password: ${{ secrets.APPLE_CERTIFICATES_PASSWORD }}
      - name: Sign Bundle Release
        if: ${{ github.ref_type == 'tag' }}
        run: |
          codesign -f --timestamp --options runtime -s "${{ secrets.APPLE_DEVELOPER_ID }}" target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/Frameworks/libpng16.16.dylib
          codesign -f --timestamp --options runtime -s "${{ secrets.APPLE_DEVELOPER_ID }}" target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/Frameworks/libfreetype.6.dylib
          codesign -f --timestamp --options runtime -s "${{ secrets.APPLE_DEVELOPER_ID }}" target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/Frameworks/libMoltenVK.dylib
          codesign -f --entitlements data/macos/entitlements_child.plist --timestamp --options runtime -s "${{ secrets.APPLE_DEVELOPER_ID }}" target/${{ matrix.target }}/release/bundle/osx/Gopher64.app/Contents/MacOS/gopher64-cli
          codesign -f --entitlements data/macos/entitlements_prod.plist --timestamp --options runtime -s "${{ secrets.APPLE_DEVELOPER_ID }}" target/${{ matrix.target }}/release/bundle/osx/Gopher64.app
          zip -r gopher64-${{ matrix.arch }}.zip target/${{ matrix.target }}/release/bundle/osx/Gopher64.app
          xcrun notarytool submit --wait --apple-id "${{ secrets.APPLE_ID }}" --team-id "${{ secrets.APPLE_DEVELOPER_ID }}" --password "${{ secrets.APPLE_APP_PASSWORD }}" gopher64-${{ matrix.arch }}.zip
          xcrun stapler staple target/${{ matrix.target }}/release/bundle/osx/Gopher64.app
      - name: Upload file
        uses: actions/upload-artifact@v7
        with:
          name: gopher64-${{ matrix.arch }}
          path: target/${{ matrix.target }}/release/bundle/osx
      - name: Setup butler
        if: ${{ github.ref_type == 'tag' }}
        uses: remarkablegames/setup-butler@v3
      - name: Upload to itch.io
        if: ${{ github.ref_type == 'tag' }}
        run: |
          butler push target/${{ matrix.target }}/release/bundle/osx/Gopher64.app loganmc10/gopher64:${{ matrix.arch }} --userversion ${GITHUB_REF_NAME#v}
        env:
          BUTLER_API_KEY: ${{ secrets.BUTLER_API_KEY }}