Releaser.yml

name: Releaser
run-name: ${{ github.actor }} is creating ${{vars.PRODUCT_NAME}} release ${{inputs.new_version}}
on:
  workflow_dispatch:
    inputs:
      new_version:
        description: |
          New Version:
          Examples:
            20.4.0-rc1, 20.4.0-rc2, 20.4.0, 20.4.1
            certified-20.4-cert1-rc1, certified-20.4-cert1
        required: true
        type: string
      is_security:
        description: |
          Security?
          (No prev RCs)
        required: true
        type: boolean
        default: false
      advisories:
        description: |
          Comma separated list of advisories.
          NO SPACES
          Example: GHSA-4xjp-22g4-9fxm,GHSA-4xjp-22g4-zzzz
        required: false
        type: string
      is_hotfix:
        description: |
          Hotfix?
          (A patch release but not security.  No prev RCs)
        required: true
        type: boolean
        default: false
      force_cherry_pick:
        description: |
          Force cherry-pick for non-RC1 releases? USE WITH CAUTION!
        required: true
        type: boolean
        default: false
      push_release_branches:
        description: |
          Push release branches live?
        required: true
        type: boolean
        default: false
      create_github_release:
        description: |
          Create the GitHub release?
        required: true
        type: boolean
        default: false
      push_tarballs:
        description: |
          Push tarballs to downloads server?
        required: true
        type: boolean
        default: false
      send_email:
        description: |
          Send announcement emails?
        required: true
        type: boolean
        default: false

jobs:
  ReleaseAsterisk:
    runs-on: ubuntu-latest
    steps:
      - name: Run Releaser
        uses: asterisk/asterisk-ci-actions/ReleaserComposite@main
        with:
          product: ${{vars.PRODUCT_NAME}}
          is_security: ${{inputs.is_security}}
          advisories: ${{inputs.advisories}}
          is_hotfix: ${{inputs.is_hotfix}}
          new_version: ${{inputs.new_version}}
          force_cherry_pick: ${{inputs.force_cherry_pick}}
          push_release_branches: ${{inputs.push_release_branches}}
          create_github_release: ${{inputs.create_github_release}}
          push_tarballs: ${{inputs.push_tarballs}}
          send_email: ${{inputs.send_email}}
          repo: ${{github.repository}}
          mail_list_ga: ${{vars.MAIL_LIST_GA}}
          mail_list_rc: ${{vars.MAIL_LIST_RC}}
          mail_list_cert_ga: ${{vars.MAIL_LIST_CERT_GA}}
          mail_list_cert_rc: ${{vars.MAIL_LIST_CERT_RC}}
          mail_list_sec: ${{vars.MAIL_LIST_SEC_ADV}}
          sec_adv_url_base: ${{vars.SEC_ADV_URL_BASE}}
          gpg_private_key: ${{secrets.ASTDEV_GPG_PRIV_KEY}}
          github_token: ${{secrets.GITHUB_TOKEN}}
          asteriskteam_gh_token: ${{secrets.ASTERISKTEAM_PAT}}
          application_id: ${{secrets.ASTERISK_ORG_ACCESS_APP_ID}}
          application_private_key: ${{secrets.ASTERISK_ORG_ACCESS_APP_PRIV_KEY}}
          asteriskteamsa_username: ${{secrets.ASTERISKTEAMSA_GMAIL_ACCT}}
          asteriskteamsa_token: ${{secrets.ASTERISKTEAMSA_GMAIL_TOKEN}}
          deploy_ssh_priv_key: ${{secrets.DOWNLOADS_DEPLOY_SSH_PRIV_KEY}}
          deploy_ssh_username: ${{secrets.DOWNLOADS_DEPLOY_SSH_USERNAME}}
          deploy_host: ${{vars.DEPLOY_HOST}}
          deploy_dir: ${{vars.DEPLOY_DIR}}
          fpbx_issue_repo: ${{vars.FPBX_ISSUE_REPO}}