experimental new pipeline

.forgejo/workflows/build.yml

@@ -0,0 +1,51 @@
+# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
+name: Build/Publish XBPS
+
+on:
+  push:
+    paths-ignore:
+      # - ".forgejo**"
+      - ".renovaterc.json"
+      - "README.md"
+
+jobs:
+  build-and-publish:
+    runs-on: docker
+    container: git.snaile.de/snailed/xbps-builder:2024.4.2029
+    env:
+      MAINTAINER: "Luca Bilke <luca@bil.ke>"
+      ARCH: "x86_64"
+    steps:
+      - name: Checkout
+        uses: https://code.forgejo.org/actions/checkout@v4
+        with:
+          submodules: true
+
+      - name: Get changed packages
+        run: |
+          echo "::set-output name=changed::$(git --no-pager diff --name-only HEAD~1 HEAD | cut -d'/' -f2 | xargs)"
+
+      - name: Build packages
+        run: |
+          set -xeu
+          export XBPS_TARGET_ARCH
+          for package in ${{ steps.files_changed.outputs.changed }}; do
+            cp -a srcpkgs/${package} /void-packages-master/srcpkgs/
+            /void-packages-master/xbps-src pkg ${package} > pkg.log
+            packagename=$(cat pkg.log | grep 'index: added' | cut -d '`' -f2 | cut -d "'" -f1)
+            mv /void-packages-master/hostdir/binpkgs/${packagename}.x86_64.xbps /target/
+          done
+
+      - name: Push packages
+        run: |
+          set -xeu
+          curl -so "/target/${{ env.ARCH }}-repodata" "https://xbps.snaile.de/${{ env.ARCH }}-repodata"
+          echo '${{ secrets.XBPS_SIGNING_KEY }}' >/tmp/privkey.pem
+          for package in /target/*; do
+            [ "$package" = "/target/${{ env.ARCH }}-repodata" ] && continue
+            xbps-rindex --add "$package"
+            XBPS_PASSPHRASE=${{ secrets.XBPS_SIGNING_PASSPHRASE }} xbps-rindex --privkey /tmp/privkey.pem --sign-pkg --signedby "${{ env.MAINTAINER }}" "$package"
+          done
+          ls -lAH /target
+          find /target -type f -exec sh -c 'curl -X PUT --digest -u "${{ vars.XBPS_WEBDAV_USER }}:${{ secrets.XBPS_WEBDAV_KEY }}" -T "${1}" "https://xbps.snaile.de/$(basename $1)"' find-shell {} \;
+          rm /tmp/privkey.pem

.forgejo/workflows/renovate.yml

@@ -0,0 +1,24 @@
+name: Renovate
+
+on:
+  schedule:
+    - cron: '0 */12 * * *'
+
+jobs:
+  renovate:
+    runs-on: docker
+    container: renovate/renovate@sha256:328686ec82a09ea7fc4326ac03a35dff926a7e85206d7f1b376d6002e04ef526
+    env:
+      RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+      GITHUB_COM_TOKEN: ${{ secrets.GH_NOPRIV_TOKEN }}
+      RENOVATE_GIT_PRIVATE_KEY: ${{ secrets.JOHNNY5_GPG_PRIVKEY }}
+      RENOVATE_PLATFORM: gitea
+      RENOVATE_ENDPOINT: ${{ github.server_url }}
+      RENOVATE_GIT_AUTHOR: 'Johnny5 <bot@snaile.de>'
+      LOG_LEVEL: debug
+
+    steps:
+      - uses: https://code.forgejo.org/actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+
+      - name: Renovate
+        run: renovate ${{ github.repository }}

.renovaterc.json

@@ -32,6 +32,7 @@
         }
     ],
     "enabledManagers": [
-        "custom.regex"
+        "custom.regex",
+        "github-actions"
     ]
 }

.woodpecker/1-renovate.yml

@@ -1,21 +0,0 @@
-when:
-  - event: cron
-    cron: renovate
-  - event: manual
-
-steps:
-  renovate:
-    image: renovate/renovate
-    commands:
-      - renovate $${CI_REPO}
-    environment:
-      RENOVATE_PLATFORM: ${CI_FORGE_TYPE}
-      RENOVATE_ENDPOINT: ${CI_FORGE_URL}
-      RENOVATE_GIT_AUTHOR: Renovate Bot <renovate@snaile.de>
-    secrets:
-      - source: github_token
-        target: github_com_token
-      - source: gitea_renovate
-        target: renovate_token
-      - source: renovate_git_private_key
-        target: RENOVATE_GIT_PRIVATE_KEY

.woodpecker/2-build.yml

@@ -1,34 +0,0 @@
-matrix:
-  PACKAGE:
-    - brave-bin
-    - tidal-hifi-bin
-    - ferdium-bin
-    - font-firacode-nf-ttf
-    - zk
-
-when:
-  - event: push
-    evaluate: 'CI_PIPELINE_FILES contains PACKAGE && CI_COMMIT_BRANCH == CI_REPO_DEFAULT_BRANCH'
-  - event: manual
-
-steps:
-  package-xbps:
-    image: git.snaile.de/snailed/xbps-builder:latest
-    pull: true
-    environment:
-      - XBPS_TARGET_ARCH=x86_64
-    secrets: 
-      - source: xbps_pem_passphrase
-        target: XBPS_PASSPHRASE
-    volumes:
-      - /var/www/xbps:/target
-      - /etc/woodpecker/:/etc/woodpecker:ro
-    commands:
-      - export XBPS_TARGET_ARCH
-      - cp -a srcpkgs/${PACKAGE} /void-packages-master/srcpkgs/
-      - /void-packages-master/xbps-src binary-bootstrap
-      - /void-packages-master/xbps-src pkg ${PACKAGE} > pkg.log
-      - "packagename=$(cat pkg.log | grep 'index: added' | cut -d '`' -f2 | cut -d \"'\" -f1)"
-      - mv /void-packages-master/hostdir/binpkgs/$${packagename}.x86_64.xbps /target/
-      - xbps-rindex -a /target/$${packagename}.x86_64.xbps
-      - xbps-rindex -S --signedby "$${CI_COMMIT_AUTHOR} <$${CI_COMMIT_AUTHOR_EMAIL}>" --privkey /etc/woodpecker/privkey.pem /target/*.xbps