feat: notarize commit id (#1728)

.github/workflows/insider-linux.yml

@@ -6,14 +6,9 @@ on:
       release_version:
         type: string
         description: Forced release version
-      new_release:
-        type: boolean
-        description: Force new Release
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 8 * * *'
   push:
     branches: [ insider ]
     paths-ignore:
@@ -151,7 +146,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: ./check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'
 

.github/workflows/insider-macos.yml

@@ -6,14 +6,9 @@ on:
       release_version:
         type: string
         description: Forced release version
-      new_release:
-        type: boolean
-        description: Force new Release
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 8 * * *'
   push:
     branches: [ insider ]
     paths-ignore:
@@ -74,7 +69,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: . check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'
 

.github/workflows/insider-spearhead.yml

@@ -2,6 +2,10 @@ name: insider-spearhead
 
 on:
   workflow_dispatch:
+    inputs:
+      new_release:
+        type: boolean
+        description: Force new Release
   schedule:
     - cron: '0 7 * * *'
 
@@ -33,6 +37,7 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: . check_tags.sh
 
       - name: Compute cache key
@@ -59,10 +64,39 @@ jobs:
         run: ./build.sh
         if: env.SHOULD_BUILD == 'yes'
 
-      - name: Update insider.json
-        run: ./update_insider.sh
+      - name: Update <quality>.json
+        run: ./update_qualityjson.sh
         env:
           GITHUB_TOKEN: ${{ secrets.STRONGER_GITHUB_TOKEN }}
           GITHUB_USERNAME: ${{ github.repository_owner }}
         if: env.SHOULD_BUILD == 'yes'
 
+      - name: Prepare assets
+        run: ./prepare_src.sh
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.STRONGER_GITHUB_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: ./release.sh
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch Linux build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'insider-linux'
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch Windows build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'insider-windows'
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch macOS build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'insider-macos'
+        if: env.SHOULD_BUILD == 'yes'
+

.github/workflows/insider-windows.yml

@@ -6,14 +6,9 @@ on:
       release_version:
         type: string
         description: Forced release version
-      new_release:
-        type: boolean
-        description: Force new Release
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 8 * * *'
   push:
     branches: [ insider ]
     paths-ignore:
@@ -81,7 +76,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: ./check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'
 

.github/workflows/stable-linux.yml

@@ -3,17 +3,12 @@ name: stable-linux
 on:
   workflow_dispatch:
     inputs:
-      new_release:
-        type: boolean
-        description: Force new Release
       force_version:
         type: boolean
         description: Force update version
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 18 * * *'
   push:
     branches: [ master ]
     paths-ignore:
@@ -146,7 +141,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: ./check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'
 

.github/workflows/stable-macos.yml

@@ -3,17 +3,12 @@ name: stable-macos
 on:
   workflow_dispatch:
     inputs:
-      new_release:
-        type: boolean
-        description: Force new Release
       force_version:
         type: boolean
         description: Force update version
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 18 * * *'
   push:
     branches: [ master ]
     paths-ignore:
@@ -69,7 +64,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: . check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'
 

.github/workflows/stable-spearhead.yml

@@ -0,0 +1,101 @@
+name: insider-spearhead
+
+on:
+  workflow_dispatch:
+    inputs:
+      new_release:
+        type: boolean
+        description: Force new Release
+  schedule:
+    - cron: '0 18 * * *'
+
+jobs:
+  build:
+    runs-on: [self-hosted, macOS, ARM64]
+    env:
+      APP_NAME: VSCodium
+      ASSETS_REPOSITORY: ${{ github.repository }}
+      VERSIONS_REPOSITORY: ${{ github.repository_owner }}/versions
+      OS_NAME: osx
+      VSCODE_ARCH: arm64
+      VSCODE_LATEST: yes
+      VSCODE_QUALITY: stable
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: insider
+
+      - name: Setup Node.js environment
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+
+      - name: Clone VSCode repo
+        run: . get_repo.sh
+
+      - name: Check existing VSCodium tags/releases
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NEW_RELEASE: ${{ github.event.inputs.new_release }}
+        run: . check_tags.sh
+
+      - name: Compute cache key
+        id: yarnCacheKey
+        run: echo "value=$(node build/azure-pipelines/computeYarnCacheKey.js)" >> $GITHUB_OUTPUT
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Get yarn cache directory path
+        id: yarnCacheDirPath
+        run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Cache yarn directory
+        uses: actions/cache@v3
+        with:
+          path: ${{ steps.yarnCacheDirPath.outputs.dir }}
+          key: ${{ env.OS_NAME }}-${{ env.VSCODE_ARCH }}-yarnCacheDir-${{ steps.yarnCacheKey.outputs.value }}
+          restore-keys: ${{ env.OS_NAME }}-${{ env.VSCODE_ARCH }}-yarnCacheDir-
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Build
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: ./build.sh
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Update <quality>.json
+        run: ./update_qualityjson.sh
+        env:
+          GITHUB_TOKEN: ${{ secrets.STRONGER_GITHUB_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Prepare assets
+        run: ./prepare_src.sh
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.STRONGER_GITHUB_TOKEN }}
+          GITHUB_USERNAME: ${{ github.repository_owner }}
+        run: ./release.sh
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch Linux build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'stable-linux'
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch Windows build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'stable-windows'
+        if: env.SHOULD_BUILD == 'yes'
+
+      - name: Dispatch macOS build
+        uses: peter-evans/repository-dispatch@v2
+        with:
+          event-type: 'stable-macos'
+        if: env.SHOULD_BUILD == 'yes'

.github/workflows/stable-windows.yml

@@ -3,17 +3,12 @@ name: stable-windows
 on:
   workflow_dispatch:
     inputs:
-      new_release:
-        type: boolean
-        description: Force new Release
       force_version:
         type: boolean
         description: Force update version
       test_asset_builder:
         type: boolean
         description: Test the assets builder
-  schedule:
-    - cron: '0 18 * * *'
   push:
     branches: [ master ]
     paths-ignore:
@@ -77,7 +72,6 @@ jobs:
       - name: Check existing VSCodium tags/releases
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NEW_RELEASE: ${{ github.event.inputs.new_release }}
         run: ./check_tags.sh
         if: env.SHOULD_DEPLOY == 'yes'