Document the release process.

* documentation/release.md: New file.
* etc/tag-release.sh: New file.
* .forgejo/workflows/publish-release.yml: New file.

1 files changed, 25 insertions, 0 deletions

diff --git a/.forgejo/workflows/publish-release.yml b/.forgejo/workflows/publish-release.yml
new file mode 100644
index 0000000..5a7dcd6
--- /dev/null
+++ b/.forgejo/workflows/publish-release.yml
@@ -0,0 +1,25 @@
+on:
+  push:
+    tags: ['v*']
+
+jobs:
+  publish-release:
+    name: Publishes the `channels.scm` file for a Guix-Science release.
+    runs-on: guix
+    steps:
+     - run: |
+         set -e
+         set -x
+         set -o pipefail
+         TAG=$GITHUB_REF_NAME
+         # Clone full repository to get all tags (shallow cloning would skip some tags).
+         guix shell git-minimal nss-certs -CN -- git clone --tags $GITHUB_SERVER_URL/$GITHUB_REPOSITORY repo
+         cd repo
+         # Extract the 'channels.scm' contents from the tag's message (filtering out the header and the signature).
+         guix shell git-minimal -C -- git show $TAG --format=%N --no-patch | tail -n +4 | head -n -15  > channels.scm
+         # Create a release using the API, JSON data is stored in a file to prevent issues with mixing quotes
+         echo "{\"tag_name\": \"$TAG\", \"hide_archive_links\": true}" > json-data
+         RELEASE_ID=$(guix shell -CN curl nss-certs -- curl -H 'Content-Type: application/json' -d @json-data "$GITHUB_API_URL/repos/$GITHUB_REPOSITORY/releases?token=${{ secrets.TOKEN }}" | guix shell -C jq -- jq -r '.id')
+         # Add the channels file to the release
+         # TODO: verify request status.
+         guix shell -CN curl nss-certs -- curl -H 'accept: application/json' -H 'Content-Type: multipart/form-data' -F 'attachment=@channels.scm' --request POST "$GITHUB_API_URL/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=channels.scm&token=${{ secrets.TOKEN }}"
\ No newline at end of file