1# The purpose of this workflow is to orchestrate Wasmtime's release process as
2# much as possible. This specific workflow is responsible for a few timed parts
3# of the process:
4#
5# * On the 5th of every month a new release branch is automatically created and
6#   the version number of the `main` branch is increased
7# * On the 20th of every month the previous release branch is published.
8#
9# This automation is all done through PRs except for the creation of the release
10# branch itself which is an write-action performed by this script. Otherwise
11# humans are ideally reviewing and rubber-stamping the output of the script all
12# other steps of the way.
13#
14# Note that this script also helps manage patch releases by sending a PR to the
15# release branch with a bumped version number for all crates with a patch-bump.
16
17name: "Automated Release Process"
18on:
19  schedule:
20    # “At 00:00 on day-of-month 5.”
21    #
22    # https://crontab.guru/#0_0_5_*_*
23    - cron: '0 0 5 * *'
24    - cron: '0 0 20 * *'
25
26  # Allow manually triggering this request via the button at
27  # https://github.com/bytecodealliance/wasmtime/actions/workflows/release-process.yml
28  workflow_dispatch:
29    inputs:
30      action:
31        description: 'Publish script argument: "cut", "release-latest", or "release-patch"'
32        required: false
33        default: 'cut'
34
35jobs:
36  release_process:
37    if: github.repository == 'bytecodealliance/wasmtime'
38    name: Run the release process
39    runs-on: ubuntu-latest
40    steps:
41      - uses: actions/checkout@v2
42        with:
43          submodules: true
44      - name: Setup
45        run: |
46          rustc scripts/publish.rs
47          git config user.name 'Wasmtime Publish'
48          git config user.email '[email protected]'
49          git remote set-url origin https://git:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/${{ github.repository }}
50
51      - name: Bump major version number
52        run: |
53          set -ex
54          # Push the current contents of `main` to a new release branch
55          cur=$(./ci/print-current-version.sh)
56          git push origin HEAD:release-$cur
57
58          # Update version numbers and make a commit indicating that. Note that
59          # on merge this will not trigger a publish.
60          ./publish bump
61          num=$(./ci/print-current-version.sh)
62
63          # Add a new section to the release notes for the new version.
64          cp RELEASES.md backup-releases
65          sed "s/VERSION/$num/" ci/RELEASES-template.md > RELEASES.md
66          cat backup-releases >> RELEASES.md
67          rm backup-releases
68
69          # Commit all of the above changes.
70          git commit -am "Bump Wasmtime to $num"
71
72          # Push the result to a branch and setup metadata for the step below
73          # that creates a PR
74          git push origin HEAD:ci/bump-to-$num
75          echo "PR_HEAD=ci/bump-to-$num" >> $GITHUB_ENV
76          echo "PR_TITLE=Bump Wasmtime to $num" >> $GITHUB_ENV
77          echo "PR_BASE=main" >> $GITHUB_ENV
78          cat > pr-body <<-EOF
79          This is an [automated pull request][process] from CI which indicates
80          that the next [\`release-$cur\` branch][branch] has been created and
81          the \`main\` branch is getting its version number bumped from $cur to
82          $num.
83
84          Maintainers should take a moment to review the [release
85          notes][RELEASES.md] for $cur, and if any changes are necessary send
86          PRs to the \`main\` branch to update [RELEASES.md] and then backport
87          these PRs to the [release branch][branch].
88
89          Maintainers should also review that aarch64-apple-darwin builds
90          are passing via [embark's CI](https://buildkite.com/embark-studios/wasmtime-aarch64-apple-darwin).
91
92          Another automated PR will be made in roughly 2 weeks time when for
93          the actual release itself.
94
95          If any issues arise on the \`main\` branch before the release is made
96          then the issue should first be fixed on \`main\` and then backported
97          to the \`release-$cur\` branch.
98
99          [RELEASES.md]: https://github.com/${{ github.repository }}/blob/main/RELEASES.md
100          [branch]: https://github.com/${{ github.repository }}/tree/release-$cur
101          [process]: https://docs.wasmtime.dev/contributing-release-process.html
102          EOF
103        if: >-
104          github.event.schedule == '0 0 5 * *' ||
105          github.event.inputs.action == 'cut'
106
107      - name: Perform latest release
108        run: |
109          set -ex
110          git fetch origin
111
112          # Determine the latest release branch
113          rustc ci/find-latest-release.rs -o /tmp/find-latest-release
114          cur=`/tmp/find-latest-release`
115
116          # Update the release date of $cur in RELEASES.md
117          rustc ci/update-release-date.rs -o /tmp/update-release-date
118          /tmp/update-release-date $(date +'%Y-%m-%d')
119
120          git commit -a -F-<<EOF
121          Update release date of Wasmtime $cur
122          EOF
123          git push origin HEAD:ci/release-date-for-$cur
124
125          # In addition to the PR we'll make below to perform the actual release
126          # make a second PR to the `main` branch to note the release date in
127          # the release notes.
128          cat > pr-body <<-EOF
129          This is an [automated pull request][process] from CI which is updating
130          the release date of Wasmtime $cur to today. This PR's base branch
131          is \`main\` and a second PR will be coming to perform the actual
132          release which will be targeted at \`release-$cur\`.
133
134          [process]: https://docs.wasmtime.dev/contributing-release-process.html
135          EOF
136          body=$(jq -sR < ./pr-body)
137          curl --include --request POST \
138            https://api.github.com/repos/${{ github.repository }}/pulls \
139            --header "Authorization: token ${{ secrets.PERSONAL_ACCESS_TOKEN }}" \
140            --data @- << EOF
141          {
142            "head": "ci/release-date-for-$cur",
143            "base": "main",
144            "title": "Update release date of Wasmtime $cur",
145            "body": $body,
146            "maintainer_can_modify": true
147          }
148          EOF
149
150          # Move to the most recent release branch, update the release date and
151          # commit it, indicating that the commit is what will get tagged and
152          # released
153          git reset --hard origin/release-$cur
154          sed -i "s/^Unreleased/Released $(date +'%Y-%m-%d')/" RELEASES.md
155          git commit -a -F-<<EOF
156          Release Wasmtime $cur
157
158          [automatically-tag-and-release-this-commit]
159          EOF
160
161          # Push the result to a branch and setup metadata for the step below
162          # that creates a PR
163          git push origin HEAD:ci/release-$cur
164          echo "PR_HEAD=ci/release-$cur" >> $GITHUB_ENV
165          echo "PR_TITLE=Release Wasmtime $cur" >> $GITHUB_ENV
166          echo "PR_BASE=release-$cur" >> $GITHUB_ENV
167          cat > pr-body <<-EOF
168          This is an [automated pull request][process] from CI which is
169          intended to notify maintainers that it's time to release Wasmtime
170          $cur. The [release branch][branch] was created roughly two weeks ago
171          and it's now time for it to be published and released.
172
173          It's recommended that maintainers double-check that [RELEASES.md]
174          is up-to-date and that there are no known issues before merging this
175          PR. When this PR is merged a release tag will automatically be
176          created, crates will be published, and CI artifacts will be produced.
177
178          [RELEASES.md]: https://github.com/${{ github.repository }}/blob/main/RELEASES.md
179          [process]: https://docs.wasmtime.dev/contributing-release-process.html
180          [branch]: https://github.com/${{ github.repository }}/tree/release-$cur
181          EOF
182        if: >-
183          github.event.schedule == '0 0 20 * *' ||
184          github.event.inputs.action == 'release-latest'
185
186      - name: Bump and release patch version number
187        run: |
188          set -ex
189          # Update version numbers on a patch basis and update RELEASES.md if a
190          # patch release marker is already in there. Note that this commit
191          # message indicates that on-merge a release will be made.
192          ./publish bump-patch
193          sed -i "s/^Unreleased/Released $(date +'%Y-%m-%d')/" RELEASES.md
194          num=$(./ci/print-current-version.sh)
195          git commit -a -F-<<EOF
196          Release Wasmtime $num
197
198          [automatically-tag-and-release-this-commit]
199          EOF
200
201          # Push the result to a branch and setup metadata for the step below
202          # that creates a PR
203          git push origin HEAD:ci/bump-to-$num
204          echo "PR_HEAD=ci/bump-to-$num" >> $GITHUB_ENV
205          echo "PR_TITLE=Release Wasmtime $num" >> $GITHUB_ENV
206          echo "PR_BASE=${{ github.ref_name }}" >> $GITHUB_ENV
207          cat > pr-body <<-EOF
208          This is an [automated pull request][process] from CI to create a patch
209          release for Wasmtime $num, requested by @${{ github.actor }}.
210
211          It's recommended that maintainers double-check that [RELEASES.md]
212          is up-to-date and that there are no known issues before merging this
213          PR. When this PR is merged a release tag will automatically be
214          created, crates will be published, and CI artifacts will be produced.
215
216          [RELEASES.md]: https://github.com/${{ github.repository }}/blob/main/RELEASES.md
217          [process]: https://docs.wasmtime.dev/contributing-release-process.html
218          EOF
219
220        if: github.event.inputs.action == 'release-patch'
221
222      - name: Make a PR
223        # Note that the syntax here is kinda funky, and the general gist is that
224        # I couldn't figure out a good way to have a multiline string-literal
225        # become a json-encoded string literal to send to GitHub. This
226        # represents my best attempt.
227        run: |
228          set -ex
229          body=$(jq -sR < ./pr-body)
230
231          curl --include --request POST \
232            https://api.github.com/repos/${{ github.repository }}/pulls \
233            --header "Authorization: token ${{ secrets.PERSONAL_ACCESS_TOKEN }}" \
234            --data @- << EOF
235          {
236            "head": "$PR_HEAD",
237            "base": "$PR_BASE",
238            "title": "$PR_TITLE",
239            "body": $body,
240            "maintainer_can_modify": true
241
242          }
243          EOF
244