name: Release Build on: # ! 为了避免重复发布版本,应当通过独特 git tag 触发。 # ! 不再使用 workflow_dispatch 触发。 # workflow_dispatch: push: tags: - "v*.*.*" permissions: write-all env: CARGO_INCREMENTAL: 0 RUST_BACKTRACE: short HUSKY: 0 concurrency: # only allow per workflow per commit (and not pr) to run at a time group: "${{ github.workflow }} - ${{ github.head_ref || github.ref }}" cancel-in-progress: ${{ github.ref != 'refs/heads/main' }} jobs: check_tag_version: name: Check Release Tag and package.json Version Consistency runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v4 with: fetch-depth: 0 - name: Check if tag is from main branch run: | TAG_REF="${GITHUB_REF##*/}" echo "Checking if tag $TAG_REF is from main branch..." TAG_COMMIT=$(git rev-list -n 1 $TAG_REF) MAIN_COMMITS=$(git rev-list origin/main) if echo "$MAIN_COMMITS" | grep -q "$TAG_COMMIT"; then echo "✅ Tag $TAG_REF is from main branch" else echo "❌ Tag $TAG_REF is not from main branch" echo "This release workflow only accepts tags from main branch." exit 1 fi - name: Check tag and package.json version run: | TAG_REF="${GITHUB_REF_NAME:-${GITHUB_REF##*/}}" echo "Current tag: $TAG_REF" PKG_VERSION=$(jq -r .version package.json) echo "package.json version: $PKG_VERSION" EXPECTED_TAG="v$PKG_VERSION" if [[ "$TAG_REF" != "$EXPECTED_TAG" ]]; then echo "❌ Version mismatch:" echo " Git tag : $TAG_REF" echo " package.json : $EXPECTED_TAG" exit 1 fi echo "✅ Tag and package.json version are consistent." update_tag: name: Update tag runs-on: ubuntu-latest needs: [release, release-for-linux-arm, release-for-fixed-webview2] steps: - name: Checkout repository uses: actions/checkout@v4 - name: Fetch UPDATE logs id: fetch_update_logs run: | if [ -f "UPDATELOG.md" ]; then UPDATE_LOGS=$(awk '/^## v/{if(flag) exit; flag=1} flag' UPDATELOG.md) if [ -n "$UPDATE_LOGS" ]; then echo "Found update logs" echo "UPDATE_LOGS<> $GITHUB_ENV echo "$UPDATE_LOGS" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV else echo "No update sections found in UPDATELOG.md" fi else echo "UPDATELOG.md file not found" fi shell: bash - name: Set Env run: | echo "BUILDTIME=$(TZ=Asia/Shanghai date)" >> $GITHUB_ENV TAG_REF="${GITHUB_REF##*/}" echo "TAG_NAME=$TAG_REF" >> $GITHUB_ENV VERSION=$(echo "$TAG_REF" | sed 's/^v//') echo "VERSION=$VERSION" >> $GITHUB_ENV echo "DOWNLOAD_URL=https://github.com/clash-verge-rev/clash-verge-rev/releases/download/$TAG_REF" >> $GITHUB_ENV shell: bash - run: | if [ -z "$UPDATE_LOGS" ]; then echo "No update logs found, using default message" UPDATE_LOGS="More new features are now supported. Check for detailed changelog soon." else echo "Using found update logs" fi cat > release.txt << EOF $UPDATE_LOGS ## 下载地址 ### Windows (不再支持Win7) #### 正常版本(推荐) - [64位(常用)](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64-setup.exe) | [ARM64(不常用)](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64-setup.exe) #### 内置Webview2版(体积较大,仅在企业版系统或无法安装webview2时使用) - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64_fixed_webview2-setup.exe) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64_fixed_webview2-setup.exe) ### macOS - [Apple M芯片](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_aarch64.dmg) | [Intel芯片](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64.dmg) ### Linux #### DEB包(Debian系) 使用 apt ./路径 安装 - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_amd64.deb) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64.deb) | [ARMv7](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_armhf.deb) #### RPM包(Redhat系) 使用 dnf ./路径 安装 - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.x86_64.rpm) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.aarch64.rpm) | [ARMv7](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.armhfp.rpm) ### FAQ - [常见问题](https://clash-verge-rev.github.io/faq/windows.html) ### 稳定机场VPN推荐 - [狗狗加速](https://verge.dginv.click/#/register?code=oaxsAGo6) Created at ${{ env.BUILDTIME }}. EOF - name: Upload Release uses: softprops/action-gh-release@v2 with: tag_name: ${{ env.TAG_NAME }} name: "Clash Verge Rev ${{ env.TAG_NAME }}" body_path: release.txt draft: false prerelease: false token: ${{ secrets.GITHUB_TOKEN }} # generate_release_notes: true release: name: Release Build needs: [check_tag_version] strategy: fail-fast: false matrix: include: - os: windows-latest target: x86_64-pc-windows-msvc - os: windows-latest target: aarch64-pc-windows-msvc - os: macos-latest target: aarch64-apple-darwin - os: macos-latest target: x86_64-apple-darwin - os: ubuntu-22.04 target: x86_64-unknown-linux-gnu runs-on: ${{ matrix.os }} steps: - name: Checkout Repository uses: actions/checkout@v4 - name: Install Rust Stable uses: dtolnay/rust-toolchain@stable - name: Add Rust Target run: rustup target add ${{ matrix.target }} - name: Rust Cache uses: Swatinem/rust-cache@v2 with: workspaces: src-tauri save-if: false - name: Install dependencies (ubuntu only) if: matrix.os == 'ubuntu-22.04' run: | sudo apt-get update sudo apt-get install -y libxslt1.1 libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev patchelf - name: Install x86 OpenSSL (macOS only) if: matrix.target == 'x86_64-apple-darwin' run: | arch -x86_64 brew install openssl@3 echo "OPENSSL_DIR=$(brew --prefix openssl@3)" >> $GITHUB_ENV echo "OPENSSL_INCLUDE_DIR=$(brew --prefix openssl@3)/include" >> $GITHUB_ENV echo "OPENSSL_LIB_DIR=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "PKG_CONFIG_PATH=$(brew --prefix openssl@3)/lib/pkgconfig" >> $GITHUB_ENV - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - uses: pnpm/action-setup@v4 name: Install pnpm with: run_install: false - name: Pnpm install and check run: | pnpm i pnpm run prebuild ${{ matrix.target }} - name: Tauri build uses: tauri-apps/tauri-action@v0 env: NODE_OPTIONS: "--max_old_space_size=4096" GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }} TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }} APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }} APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }} APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }} APPLE_ID: ${{ secrets.APPLE_ID }} APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }} APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} with: tagName: ${{ github.ref_name }} releaseName: "Clash Verge Rev ${{ github.ref_name }}" releaseBody: "Draft release, will be updated later." releaseDraft: true prerelease: false tauriScript: pnpm args: --target ${{ matrix.target }} includeUpdaterJson: true release-for-linux-arm: name: Release Build for Linux ARM needs: [check_tag_version] strategy: fail-fast: false matrix: include: - os: ubuntu-22.04 target: aarch64-unknown-linux-gnu arch: arm64 - os: ubuntu-22.04 target: armv7-unknown-linux-gnueabihf arch: armhf runs-on: ${{ matrix.os }} steps: - name: Checkout Repository uses: actions/checkout@v4 - name: Install Rust Stable uses: dtolnay/rust-toolchain@stable - name: Add Rust Target run: rustup target add ${{ matrix.target }} - name: Rust Cache uses: Swatinem/rust-cache@v2 with: workspaces: src-tauri save-if: false - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - name: Install pnpm uses: pnpm/action-setup@v4 with: run_install: false - name: Pnpm install and check run: | pnpm i pnpm run prebuild ${{ matrix.target }} - name: "Setup for linux" run: |- sudo ls -lR /etc/apt/ cat > /tmp/sources.list << EOF deb [arch=amd64,i386] http://archive.ubuntu.com/ubuntu jammy main multiverse universe restricted deb [arch=amd64,i386] http://archive.ubuntu.com/ubuntu jammy-security main multiverse universe restricted deb [arch=amd64,i386] http://archive.ubuntu.com/ubuntu jammy-updates main multiverse universe restricted deb [arch=amd64,i386] http://archive.ubuntu.com/ubuntu jammy-backports main multiverse universe restricted deb [arch=armhf,arm64] http://ports.ubuntu.com/ubuntu-ports jammy main multiverse universe restricted deb [arch=armhf,arm64] http://ports.ubuntu.com/ubuntu-ports jammy-security main multiverse universe restricted deb [arch=armhf,arm64] http://ports.ubuntu.com/ubuntu-ports jammy-updates main multiverse universe restricted deb [arch=armhf,arm64] http://ports.ubuntu.com/ubuntu-ports jammy-backports main multiverse universe restricted EOF sudo mv /etc/apt/sources.list /etc/apt/sources.list.default sudo mv /tmp/sources.list /etc/apt/sources.list sudo dpkg --add-architecture ${{ matrix.arch }} sudo apt update sudo apt install -y \ libxslt1.1:${{ matrix.arch }} \ libwebkit2gtk-4.1-dev:${{ matrix.arch }} \ libayatana-appindicator3-dev:${{ matrix.arch }} \ libssl-dev:${{ matrix.arch }} \ patchelf:${{ matrix.arch }} \ librsvg2-dev:${{ matrix.arch }} - name: "Install aarch64 tools" if: matrix.target == 'aarch64-unknown-linux-gnu' run: | sudo apt install -y \ gcc-aarch64-linux-gnu \ g++-aarch64-linux-gnu - name: "Install armv7 tools" if: matrix.target == 'armv7-unknown-linux-gnueabihf' run: | sudo apt install -y \ gcc-arm-linux-gnueabihf \ g++-arm-linux-gnueabihf - name: Build for Linux run: | export PKG_CONFIG_ALLOW_CROSS=1 if [ "${{ matrix.target }}" == "aarch64-unknown-linux-gnu" ]; then export PKG_CONFIG_PATH=/usr/lib/aarch64-linux-gnu/pkgconfig/:$PKG_CONFIG_PATH export PKG_CONFIG_SYSROOT_DIR=/usr/aarch64-linux-gnu/ elif [ "${{ matrix.target }}" == "armv7-unknown-linux-gnueabihf" ]; then export PKG_CONFIG_PATH=/usr/lib/arm-linux-gnueabihf/pkgconfig/:$PKG_CONFIG_PATH export PKG_CONFIG_SYSROOT_DIR=/usr/arm-linux-gnueabihf/ fi pnpm build --target ${{ matrix.target }} env: NODE_OPTIONS: "--max_old_space_size=4096" TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }} TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }} - name: Get Version run: | sudo apt-get update sudo apt-get install jq echo "VERSION=$(cat package.json | jq '.version' | tr -d '"')" >> $GITHUB_ENV echo "BUILDTIME=$(TZ=Asia/Shanghai date)" >> $GITHUB_ENV - name: Upload Release uses: softprops/action-gh-release@v2 with: tag_name: v${{env.VERSION}} name: "Clash Verge Rev v${{env.VERSION}}" body: "See release notes for detailed changelog." token: ${{ secrets.GITHUB_TOKEN }} files: | src-tauri/target/${{ matrix.target }}/release/bundle/deb/*.deb src-tauri/target/${{ matrix.target }}/release/bundle/rpm/*.rpm release-for-fixed-webview2: name: Release Build for Fixed WebView2 needs: [check_tag_version] strategy: fail-fast: false matrix: include: - os: windows-latest target: x86_64-pc-windows-msvc arch: x64 - os: windows-latest target: aarch64-pc-windows-msvc arch: arm64 runs-on: ${{ matrix.os }} steps: - name: Checkout Repository uses: actions/checkout@v4 - name: Add Rust Target run: rustup target add ${{ matrix.target }} - name: Rust Cache uses: Swatinem/rust-cache@v2 with: workspaces: src-tauri save-if: false - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - uses: pnpm/action-setup@v4 name: Install pnpm with: run_install: false - name: Pnpm install and check run: | pnpm i pnpm run prebuild ${{ matrix.target }} - name: Download WebView2 Runtime run: | invoke-webrequest -uri https://github.com/westinyang/WebView2RuntimeArchive/releases/download/109.0.1518.78/Microsoft.WebView2.FixedVersionRuntime.109.0.1518.78.${{ matrix.arch }}.cab -outfile Microsoft.WebView2.FixedVersionRuntime.109.0.1518.78.${{ matrix.arch }}.cab Expand .\Microsoft.WebView2.FixedVersionRuntime.109.0.1518.78.${{ matrix.arch }}.cab -F:* ./src-tauri Remove-Item .\src-tauri\tauri.windows.conf.json Rename-Item .\src-tauri\webview2.${{ matrix.arch }}.json tauri.windows.conf.json - name: Tauri build id: build uses: tauri-apps/tauri-action@v0 env: NODE_OPTIONS: "--max_old_space_size=4096" GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }} TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }} with: tauriScript: pnpm args: --target ${{ matrix.target }} - name: Rename run: | $files = Get-ChildItem ".\src-tauri\target\${{ matrix.target }}\release\bundle\nsis\*-setup.exe" foreach ($file in $files) { $newName = $file.Name -replace "-setup\.exe$", "_fixed_webview2-setup.exe" Rename-Item $file.FullName $newName } $files = Get-ChildItem ".\src-tauri\target\${{ matrix.target }}\release\bundle\nsis\*.nsis.zip" foreach ($file in $files) { $newName = $file.Name -replace "-setup\.nsis\.zip$", "_fixed_webview2-setup.nsis.zip" Rename-Item $file.FullName $newName } $files = Get-ChildItem ".\src-tauri\target\${{ matrix.target }}\release\bundle\nsis\*-setup.exe.sig" foreach ($file in $files) { $newName = $file.Name -replace "-setup\.exe\.sig$", "_fixed_webview2-setup.exe.sig" Rename-Item $file.FullName $newName } - name: Upload Release uses: softprops/action-gh-release@v2 with: tag_name: v${{steps.build.outputs.appVersion}} name: "Clash Verge Rev v${{steps.build.outputs.appVersion}}" body: "See release notes for detailed changelog." token: ${{ secrets.GITHUB_TOKEN }} files: src-tauri/target/${{ matrix.target }}/release/bundle/nsis/*setup* - name: Portable Bundle run: pnpm portable-fixed-webview2 ${{ matrix.target }} env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} release-update: name: Release Update runs-on: ubuntu-latest needs: [update_tag] steps: - name: Checkout repository uses: actions/checkout@v4 - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - uses: pnpm/action-setup@v4 name: Install pnpm with: run_install: false - name: Pnpm install run: pnpm i - name: Release updater file run: pnpm updater env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} release-update-for-fixed-webview2: runs-on: ubuntu-latest needs: [update_tag] steps: - name: Checkout repository uses: actions/checkout@v4 - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - uses: pnpm/action-setup@v4 name: Install pnpm with: run_install: false - name: Pnpm install run: pnpm i - name: Release updater file run: pnpm updater-fixed-webview2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} submit-to-winget: name: Submit to Winget runs-on: ubuntu-latest needs: [update_tag, release-update] steps: - name: Checkout repository uses: actions/checkout@v4 with: fetch-depth: 0 - name: Get Version run: | sudo apt-get update sudo apt-get install jq echo "VERSION=$(cat package.json | jq '.version' | tr -d '"')" >> $GITHUB_ENV - name: Submit to Winget uses: vedantmgoyal9/winget-releaser@main with: identifier: ClashVergeRev.ClashVergeRev version: ${{env.VERSION}} release-tag: v${{env.VERSION}} installers-regex: '_(arm64|x64|x86)-setup\.exe$' token: ${{ secrets.WINGET_TOKEN }} notify-telegram: name: Notify Telegram runs-on: ubuntu-latest needs: [ update_tag, release-update, release-update-for-fixed-webview2, submit-to-winget, ] steps: - name: Checkout repository uses: actions/checkout@v4 - name: Fetch UPDATE logs id: fetch_update_logs run: | if [ -f "UPDATELOG.md" ]; then UPDATE_LOGS=$(awk '/^## v/{if(flag) exit; flag=1} flag' UPDATELOG.md) if [ -n "$UPDATE_LOGS" ]; then echo "Found update logs" echo "UPDATE_LOGS<> $GITHUB_ENV echo "$UPDATE_LOGS" >> $GITHUB_ENV echo "EOF" >> $GITHUB_ENV else echo "No update sections found in UPDATELOG.md" fi else echo "UPDATELOG.md file not found" fi shell: bash - name: Install Node uses: actions/setup-node@v4 with: node-version: "22" - uses: pnpm/action-setup@v4 name: Install pnpm with: run_install: false - name: Install dependencies run: pnpm install --frozen-lockfile - name: Get Version and Release Info run: | sudo apt-get update sudo apt-get install jq echo "VERSION=$(cat package.json | jq '.version' | tr -d '"')" >> $GITHUB_ENV echo "DOWNLOAD_URL=https://github.com/clash-verge-rev/clash-verge-rev/releases/download/v$(cat package.json | jq '.version' | tr -d '"')" >> $GITHUB_ENV echo "BUILDTIME=$(TZ=Asia/Shanghai date)" >> $GITHUB_ENV - name: Generate release.txt run: | if [ -z "$UPDATE_LOGS" ]; then echo "No update logs found, using default message" UPDATE_LOGS="More new features are now supported. Check for detailed changelog soon." else echo "Using found update logs" fi cat > release.txt << EOF $UPDATE_LOGS ## 下载地址 ### Windows (不再支持Win7) #### 正常版本(推荐) - [64位(常用)](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64-setup.exe) | [ARM64(不常用)](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64-setup.exe) #### 内置Webview2版(体积较大,仅在企业版系统或无法安装webview2时使用) - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64_fixed_webview2-setup.exe) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64_fixed_webview2-setup.exe) ### macOS - [Apple M芯片](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_aarch64.dmg) | [Intel芯片](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_x64.dmg) ### Linux #### DEB包(Debian系) 使用 apt ./路径 安装 - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_amd64.deb) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_arm64.deb) | [ARMv7](${{ env.DOWNLOAD_URL }}/Clash.Verge_${{ env.VERSION }}_armhf.deb) #### RPM包(Redhat系) 使用 dnf ./路径 安装 - [64位](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.x86_64.rpm) | [ARM64](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.aarch64.rpm) | [ARMv7](${{ env.DOWNLOAD_URL }}/Clash.Verge-${{ env.VERSION }}-1.armhfp.rpm) ### FAQ - [常见问题](https://clash-verge-rev.github.io/faq/windows.html) ### 稳定机场VPN推荐 - [狗狗加速](https://verge.dginv.click/#/register?code=oaxsAGo6) Created at ${{ env.BUILDTIME }}. EOF - name: Send Telegram Notification run: node scripts/telegram.mjs env: TELEGRAM_BOT_TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }} BUILD_TYPE: release VERSION: ${{ env.VERSION }} DOWNLOAD_URL: ${{ env.DOWNLOAD_URL }}