5 Commits

Include renames

Author	SHA1	Message	Date
JakeBreath	ecac4cb8b4	Fix the release asset upload for names with spaces ... curl exit 3 (malformed URL) on 'J621 Setup 0.1.1.exe': percent-encode the asset name in the query string. Also replace assets instead of skipping them on re-runs: NSIS builds are not bit-reproducible, so latest.yml/latest-linux.yml must reference the installers produced by the same run. Existing assets are deleted by id before the fresh upload.	2026-09-23 07:14:19 -05:00
JakeBreath	2eb7af0d41	Fix the CD wine build and add per-part toggles ... The Windows NSIS step failed under wine for two reasons: no X display (nodrv_CreateWindow) and missing 32-bit libraries (failed to load syswow64\ntdll.dll). The job now installs xvfb + wine32:i386 and runs the desktop build under xvfb-run, with Gecko/Mono lookups disabled. Also add `images` and `desktop` dispatch inputs so either half of the CD can be skipped (e.g. desktop-only or images-only releases).	2026-09-23 00:06:55 -05:00
JakeBreath	7cecfeabc6	Use a minimal registry PAT and the job token for releases ... Gitea's container registry rejects the automatic job token (go-gitea/gitea#23642 is still open), so the image push keeps a PAT with only the write:package scope; a preflight step fails clearly when the REGISTRY_USER/REGISTRY_TOKEN secrets are missing. Release creation needs no PAT: the desktop job asks for contents: write on the job token.	2026-09-22 23:35:55 -05:00
JakeBreath	ed6178d12e	Make Actions token permissions explicit ... The automatic job token creates the desktop release, so the CD desktop job asks for contents: write; the images job keeps contents: read and asks for packages: write so the job token can stand in for the scoped registry PAT. CI stays read-only. The registry token itself remains a write:package-only PAT (verified login + pull).	2026-09-22 23:30:37 -05:00
JakeBreath	8f9656ac0e	Add the manual CD release workflow ... One dispatch builds and pushes both images and builds the desktop packages into a Gitea release (desktop-v<version>, installers + latest*.yml attached, idempotent on re-run). The live update feed stays a deploy-host operation: CI has no SSH key for jakerasp, so push_desktop.sh --no-build remains the way to publish it. Repo secrets REGISTRY_USER/REGISTRY_TOKEN are set, so the image push uses the Gitea registry credentials directly.	2026-09-22 23:23:05 -05:00