release: codesign macOS and generate Homebrew bottles

Author: ruphy

.github/workflows/release.yml

@@ -70,6 +70,11 @@ jobs:
       - name: Build release binary
         run: cargo build --release --target ${{ matrix.target }} --verbose
 
+      - name: Code sign macOS binary
+        if: startsWith(matrix.os, 'macos')
+        run: |
+          codesign --force --sign - target/${{ matrix.target }}/release/sshdb
+
       - name: Prepare release asset (Windows)
         if: matrix.os == 'windows-latest'
         shell: pwsh
@@ -146,30 +151,101 @@ jobs:
           TAR_URL="https://github.com/ruphy/sshdb/archive/refs/tags/v${VERSION}.tar.gz"
           SHA256=$(curl -L "$TAR_URL" | shasum -a 256 | awk '{print $1}')
 
+          # Calculate checksums for bottle files
+          MACOS_X86_64_TAR="artifacts/sshdb-macos-x86_64/sshdb-macos-x86_64.tar.gz"
+          MACOS_ARM64_TAR="artifacts/sshdb-macos-aarch64/sshdb-macos-aarch64.tar.gz"
+          LINUX_X86_64_TAR="artifacts/sshdb-linux-x86_64/sshdb-linux-x86_64.tar.gz"
+
+          MACOS_X86_64_SHA=""
+          MACOS_ARM64_SHA=""
+          LINUX_X86_64_SHA=""
+
+          if [ -f "${MACOS_X86_64_TAR}" ]; then
+            MACOS_X86_64_SHA=$(shasum -a 256 "${MACOS_X86_64_TAR}" | awk '{print $1}')
+          fi
+          if [ -f "${MACOS_ARM64_TAR}" ]; then
+            MACOS_ARM64_SHA=$(shasum -a 256 "${MACOS_ARM64_TAR}" | awk '{print $1}')
+          fi
+          if [ -f "${LINUX_X86_64_TAR}" ]; then
+            LINUX_X86_64_SHA=$(shasum -a 256 "${LINUX_X86_64_TAR}" | awk '{print $1}')
+          fi
+
           TAP_DIR=$(mktemp -d)
           git config --global user.name "sshdb-release-bot"
           git config --global user.email "[email protected]"
           git clone "https://x-access-token:${HOMEBREW_TAP_TOKEN}@github.com/ruphy/homebrew-sshdb" "${TAP_DIR}"
           mkdir -p "${TAP_DIR}/Formula"
 
-          cat > "${TAP_DIR}/Formula/sshdb.rb" <<EOF
+          # Generate formula with bottle block
+          {
+            cat <<EOFRUBY
           class Sshdb < Formula
             desc "Keyboard-first SSH library and launcher TUI"
             homepage "https://github.com/ruphy/sshdb"
             url "${TAR_URL}"
             sha256 "${SHA256}"
             license "GPL-3.0-or-later"
             depends_on "rust" => :build
+          EOFRUBY
 
+            if [ -n "${MACOS_X86_64_SHA}" ] || [ -n "${MACOS_ARM64_SHA}" ] || [ -n "${LINUX_X86_64_SHA}" ]; then
+              cat <<EOFRUBY
+            bottle do
+              root_url "https://github.com/ruphy/sshdb/releases/download/v${VERSION}"
+          EOFRUBY
+              if [ -n "${MACOS_ARM64_SHA}" ]; then
+                cat <<EOFRUBY
+              sha256 cellar: :any_skip_relocation, arm64_sonoma: "${MACOS_ARM64_SHA}"
+              sha256 cellar: :any_skip_relocation, arm64_ventura: "${MACOS_ARM64_SHA}"
+              sha256 cellar: :any_skip_relocation, arm64_monterey: "${MACOS_ARM64_SHA}"
+          EOFRUBY
+              fi
+              if [ -n "${MACOS_X86_64_SHA}" ]; then
+                cat <<EOFRUBY
+              sha256 cellar: :any_skip_relocation, x86_64_sonoma: "${MACOS_X86_64_SHA}"
+              sha256 cellar: :any_skip_relocation, x86_64_ventura: "${MACOS_X86_64_SHA}"
+              sha256 cellar: :any_skip_relocation, x86_64_monterey: "${MACOS_X86_64_SHA}"
+          EOFRUBY
+              fi
+              if [ -n "${LINUX_X86_64_SHA}" ]; then
+                cat <<EOFRUBY
+              sha256 cellar: :any_skip_relocation, x86_64_linux: "${LINUX_X86_64_SHA}"
+          EOFRUBY
+              fi
+              cat <<EOFRUBY
+            end
+          EOFRUBY
+            fi
+
+            cat <<EOFRUBY
             def install
-              system "cargo", "install", *std_cargo_args
+              if OS.mac?
+                if Hardware::CPU.arm?
+                  bin_path = "sshdb-macos-aarch64.tar.gz"
+                else
+                  bin_path = "sshdb-macos-x86_64.tar.gz"
+                end
+              elsif OS.linux?
+                bin_path = "sshdb-linux-x86_64.tar.gz"
+              end
+
+              if bin_path
+                bin_url = "https://github.com/ruphy/sshdb/releases/download/v\#{version}/\#{bin_path}"
+                system "curl", "-L", "-o", bin_path, bin_url
+                system "tar", "xzf", bin_path
+                bin.install "sshdb"
+                rm bin_path
+              else
+                system "cargo", "install", *std_cargo_args
+              end
             end
 
             test do
               system "#{bin}/sshdb", "--help"
             end
           end
-          EOF
+          EOFRUBY
+          } > "${TAP_DIR}/Formula/sshdb.rb"
 
           cd "${TAP_DIR}"
           git add Formula/sshdb.rb