hyperagent/.github/workflows/publish.yml at 0735ef403f5ef97daa551be7dd3376244752490f · simongdavies/hyperagent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Publish

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      version:
        description: "Version to publish (e.g., 0.1.0)"
        required: true
        type: string

permissions:
  contents: read
  packages: write

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:
  # Test on all hypervisor configurations before publishing
  # NOTE: Windows WHP temporarily disabled (see pr-validate.yml)
  test:
    name: Test (${{ matrix.build }})
    strategy:
      fail-fast: true
      matrix:
        build: [linux-kvm, linux-mshv]
        include:
          - build: linux-kvm
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
            hypervisor: kvm
          - build: linux-mshv
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-azlinux3-mshv-amd"]
            hypervisor: mshv
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Build release binary
        run: node scripts/build-binary.js --release

      - name: Run tests
        run: just test

  # Build and publish npm package (after tests pass)
  publish-npm:
    name: Publish to npmjs.org
    needs: [test]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"
          registry-url: "https://registry.npmjs.org"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Build binary
        run: VERSION="${{ github.event.release.tag_name || inputs.version }}" node scripts/build-binary.js --release

      - name: Set version from release tag
        if: github.event_name == 'release'
        run: npm version ${{ github.event.release.tag_name }} --no-git-tag-version --allow-same-version

      - name: Set version from input
        if: github.event_name == 'workflow_dispatch'
        run: npm version ${{ inputs.version }} --no-git-tag-version --allow-same-version

      - name: Publish to npmjs.org
        run: npm publish --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

  # Build and publish Docker image (after tests pass)
  publish-docker:
    name: Publish to GitHub Container Registry
    needs: [test]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - uses: actions/setup-node@v6
        with:
          node-version: "22"

      - uses: hyperlight-dev/ci-setup-workflow@v1.8.0
        with:
          rust-toolchain: "1.89"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Setup
        run: just setup

      - name: Resolve symlinks for Docker context
        run: |
          if [ -L deps/js-host-api ]; then
            target=$(readlink -f deps/js-host-api)
            rm deps/js-host-api
            cp -r "$target" deps/js-host-api
          fi

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata for Docker
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
            type=raw,value=latest,enable={{is_default_branch}}

      - name: Build and push Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          build-args: |
            VERSION=${{ github.event.release.tag_name || inputs.version }}
          cache-from: type=gha
          cache-to: type=gha,mode=max