Update, tidy up, and standardize GitHub Actions workflows

Author: Keavon

.github/workflows/build-linux-bundle.yml

@@ -1,57 +1,60 @@
-name: Build Linux Bundle
+name: "Build Linux Bundle"
 
 on:
-  push:
-    branches:
-      - master
   workflow_dispatch:
     inputs:
       push_to_cache:
         description: "Push to Nix Cache"
         required: false
         type: boolean
         default: false
+  push:
+    branches:
+      - master
 
 jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@main
+      - name: 📥 Clone repository
+        uses: actions/checkout@v4
+
+      - name: ❄ Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
 
-      - name: Free disk space
+      - name: 🗑 Free disk space
         run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache
 
-      - name: Build Nix Package
+      - name: 📦 Build Nix package
         run: nix build --no-link --print-out-paths
 
-      - name: Push to Nix Cache
+      - name: 📤 Push to Nix cache
         if: github.ref == 'refs/heads/master' || inputs.push_to_cache == true
         env:
           NIX_CACHE_AUTH_TOKEN: ${{ secrets.NIX_CACHE_AUTH_TOKEN }}
         run: |
           nix run nixpkgs#cachix -- authtoken $NIX_CACHE_AUTH_TOKEN
           nix build --no-link --print-out-paths | nix run nixpkgs#cachix -- push graphite
 
-      - name: Build Linux Bundle
+      - name: 🏗 Build Linux bundle
         run: nix build .#graphite-bundle.tar.xz && cp ./result ./graphite-linux-bundle.tar.xz
 
-      - name: Upload Linux Bundle
+      - name: 📦 Upload Linux bundle
         uses: actions/upload-artifact@v4
         with:
           name: graphite-linux-bundle
           path: graphite-linux-bundle.tar.xz
           compression-level: 0
 
-      - name: Setup Flatpak Tooling
+      - name: 🔧 Install Flatpak tooling
         run: |
           sudo apt-get update
           sudo apt-get install -y flatpak flatpak-builder
           flatpak --user remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
 
-      - name: Build Flatpak
+      - name: 🏗 Build Flatpak
         run: |
           nix build .#graphite-flatpak-manifest
 
@@ -67,7 +70,7 @@ jobs:
 
           flatpak build-bundle repo Graphite.flatpak art.graphite.Graphite --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo
 
-      - name: Upload Flatpak
+      - name: 📦 Upload Flatpak package
         uses: actions/upload-artifact@v4
         with:
           name: graphite-flatpak

.github/workflows/build-mac-bundle.yml

@@ -1,4 +1,4 @@
-name: Build Mac Bundle
+name: "Build Mac Bundle"
 
 on:
   workflow_dispatch: {}
@@ -14,18 +14,18 @@ jobs:
       WASM_BINDGEN_CLI_VERSION: "0.2.100"
 
     steps:
-      - name: Checkout
+      - name: 📥 Clone repository
         uses: actions/checkout@v4
 
-      - name: Setup Rust
+      - name: 🦀 Install Rust
         uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: stable
           override: true
           rustflags: ""
           target: wasm32-unknown-unknown
 
-      - name: Cache Cargo
+      - name: 💾 Set up Cargo cache
         uses: actions/cache@v4
         with:
           path: |
@@ -34,7 +34,7 @@ jobs:
             target
           key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
 
-      - name: Setup Node
+      - name: 🟢 Install Node.js
         uses: actions/setup-node@v4
         with:
           node-version-file: .nvmrc
@@ -43,7 +43,7 @@ jobs:
             package-lock.json
             frontend/package-lock.json
 
-      - name: Install Native Dependencies
+      - name: 🚧 Install native dependencies
         env:
           GITHUB_TOKEN: ${{ github.token }}
           BINSTALL_DISABLE_TELEMETRY: "true"
@@ -64,25 +64,26 @@ jobs:
           cargo binstall --no-confirm --force cargo-about
           cargo binstall --no-confirm --force "wasm-bindgen-cli@${WASM_BINDGEN_CLI_VERSION}"
 
-      - name: Build Mac Bundle
+      - name: 🏗 Build Mac bundle
         env:
           CARGO_TERM_COLOR: always
         run: cargo run build desktop
 
-      - name: Stage Artifacts
+      - name: 📁 Stage artifacts
         shell: bash
         run: |
           rm -rf target/artifacts
           mkdir -p target/artifacts
           cp -R target/release/Graphite.app target/artifacts/Graphite.app
 
-      - name: Upload Mac Bundle
+      - name: 📦 Upload Mac bundle
+        if: github.ref != 'refs/heads/master'
         uses: actions/upload-artifact@v4
         with:
           name: graphite-mac-bundle
           path: target/artifacts
 
-      - name: Sign and Notarize Mac Bundle Preparation
+      - name: 🔏 Sign and notarize (preparation)
         if: github.ref == 'refs/heads/master'
         env:
           APPLE_CERT_BASE64: ${{ secrets.APPLE_CERT_BASE64 }}
@@ -116,7 +117,7 @@ jobs:
           </plist>
           EOF
 
-      - name: Sign and Notarize Mac Bundle
+      - name: 🔏 Sign and notarize
         if: github.ref == 'refs/heads/master'
         env:
           APPLE_EMAIL: ${{ secrets.APPLE_EMAIL }}
@@ -149,7 +150,7 @@ jobs:
 
           spctl -a -vv "$APP_PATH"
 
-      - name: Upload Mac Bundle Signed
+      - name: 📦 Upload signed Mac bundle
         if: github.ref == 'refs/heads/master'
         uses: actions/upload-artifact@v4
         with:

.github/workflows/build-nix-package.yml

@@ -1,4 +1,4 @@
-name: Build Nix Package
+name: "Build Nix Package"
 
 on:
   workflow_dispatch: {}
@@ -9,9 +9,14 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v4
-      - uses: DeterminateSystems/nix-installer-action@main
-      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - name: 📥 Clone repository
+        uses: actions/checkout@v4
 
-      - name: Build Nix Package Dev
+      - name: ❄ Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
+
+      - name: 💾 Set up Nix cache
+        uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - name: 📦 Build Nix package dev
         run: nix build .#graphite-dev --print-build-logs

.github/workflows/build-production.yml

@@ -21,29 +21,29 @@ jobs:
       INDEX_HTML_HEAD_REPLACEMENT: <script defer data-domain="editor.graphite.art" data-api="https://graphite.art/visit/event" src="https://graphite.art/visit/script.hash.js"></script>
 
     steps:
-      - name: 📥 Clone and checkout repository
-        uses: actions/checkout@v3
+      - name: 📥 Clone repository
+        uses: actions/checkout@v4
 
       - name: 🗑 Clear wasm-bindgen cache
         run: rm -r ~/.cache/.wasm-pack
 
-      - name: 🟢 Install the latest Node.js
+      - name: 🟢 Install Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "latest"
+          node-version-file: .nvmrc
 
       - name: 🚧 Install build dependencies
         run: |
           cd frontend
           npm run setup
 
-      - name: 🦀 Install the latest Rust
-        run: |
-          echo "Initial system version:"
-          rustc --version
-          rustup update stable
-          echo "Latest updated version:"
-          rustc --version
+      - name: 🦀 Install Rust
+        uses: actions-rust-lang/setup-rust-toolchain@v1
+        with:
+          toolchain: stable
+          override: true
+          rustflags: ""
+          target: wasm32-unknown-unknown
 
       - name: ✂ Replace template in <head> of index.html
         run: |
@@ -55,15 +55,11 @@ jobs:
         run: mold -run cargo run build web
 
       - name: 📤 Publish to Cloudflare Pages
-        id: cloudflare
-        uses: cloudflare/pages-action@1
-        with:
-          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
-          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-          gitHubToken: ${{ secrets.GITHUB_TOKEN }}
-          projectName: graphite-editor
-          directory: frontend/dist
-          branch: master
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+        run: |
+          npx wrangler@3 pages deploy "frontend/dist" --project-name="graphite-editor" --branch="master" --commit-dirty=true
 
       - name: 📦 Upload assets to GitHub release
         env: