streamer-tools/whats-that-music
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 3 Wiki Activity

Match actual runner labels and use the injected token

Browse Source 
The mac job targeted macos-arm64, but the registered Mac runner is
labelled macos-latest, so that job would have queued forever rather than
failing -- a job with no matching runner is silently pending.

Also switches the publish step to secrets.GITEA_TOKEN, which Gitea injects
automatically and scopes to the repo, instead of requiring a hand-created
RELEASE_TOKEN. RELEASE_TOKEN still overrides it if wider rights are needed.

Runners confirmed via /api/v1/admin/actions/runners: ubuntu-latest,
windows-latest (x2) and macos-latest are all online.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
shadowdao
2026-08-28 18:56:58 -07:00
co-authored by Claude Opus 5
parent f8d10d3a24
commit 394dc7107c
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/release.yml
+8 -4
View File
@@ -6,11 +6,13 @@ name: Build release artifacts
# queues silently rather than failing, so register all three before tagging: # queues silently rather than failing, so register all three before tagging:
# ubuntu-latest Linux AppImage # ubuntu-latest Linux AppImage
# windows-latest Windows NSIS installer + portable zip # windows-latest Windows NSIS installer + portable zip
# macos-arm64 macOS dmg + zip, both architectures (M-series builds both) # macos-latest macOS dmg + zip, both architectures (M-series builds both)
# #
# Nothing cross-builds any more: dmg requires macOS, and the Windows exe needs # Nothing cross-builds any more: dmg requires macOS, and the Windows exe needs
# rcedit on Windows to get its icon and version resources. # rcedit on Windows to get its icon and version resources.
# #
# A RELEASE_TOKEN secret is optional; GITEA_TOKEN is used by default.
#
# All output is unsigned. Once certificates exist: for macOS drop mac.identity # All output is unsigned. Once certificates exist: for macOS drop mac.identity
# from package.json and remove CSC_IDENTITY_AUTO_DISCOVERY; for Windows add the # from package.json and remove CSC_IDENTITY_AUTO_DISCOVERY; for Windows add the
# cert secrets. Until then users hit Gatekeeper and SmartScreen warnings. # cert secrets. Until then users hit Gatekeeper and SmartScreen warnings.
@@ -89,7 +91,7 @@ jobs:
if-no-files-found: error if-no-files-found: error
macos: macos:
runs-on: macos-arm64 runs-on: macos-latest
defaults: defaults:
run: run:
working-directory: desktop-client working-directory: desktop-client
@@ -133,12 +135,14 @@ jobs:
- name: Create release and attach artifacts - name: Create release and attach artifacts
env: env:
TOKEN: ${{ secrets.RELEASE_TOKEN }} # Gitea injects GITEA_TOKEN automatically, repo-scoped and short-lived.
# RELEASE_TOKEN is an optional override if wider rights are ever needed.
TOKEN: ${{ secrets.RELEASE_TOKEN || secrets.GITEA_TOKEN }}
API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }} API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
run: | run: |
set -euo pipefail set -euo pipefail
if [ -z "${TOKEN:-}" ]; then if [ -z "${TOKEN:-}" ]; then
echo "RELEASE_TOKEN secret is not set." >&2 echo "No token available (GITEA_TOKEN missing and RELEASE_TOKEN unset)." >&2
exit 1 exit 1
fi fi