bump: v0.0.39 -> v0.0.40

.github/workflows/release.yaml

@@ -30,9 +30,45 @@ jobs:
       - name: Check
         run: nix flake check
 
-  release:
+  # release:
+  #   runs-on: ubuntu-latest
+  #   needs: check
+  #   steps:
+  #     - name: Checkout
+  #       uses: actions/checkout@v4
+
+  #     - name: Install Nix
+  #       uses: cachix/install-nix-action@v31
+  #       with:
+  #         nix_path: nixpkgs=channel:nixos-unstable
+
+  #     - name: Use Cachix
+  #       uses: cachix/cachix-action@v16
+  #       with:
+  #         name: trevstack
+  #         authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
+
+  #     - name: Build
+  #       run: >
+  #         nix build
+  #         .#trevstack-linux-amd64
+  #         .#trevstack-linux-arm64
+  #         .#trevstack-linux-arm
+  #         .#trevstack-windows-amd64
+  #         .#trevstack-darwin-amd64
+  #         .#trevstack-darwin-arm64
+
+  #     - name: Release
+  #       uses: softprops/action-gh-release@v2
+  #       with:
+  #         generate_release_notes: true
+  #         files: |-
+  #           result*/bin/*
+
+  # https://docs.docker.com/build/ci/github-actions/manage-tags-labels/
+  package:
     runs-on: ubuntu-latest
-    needs: check
+    needs: check # Wait for binary cache to propagate
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -48,39 +84,18 @@ jobs:
           name: trevstack
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
 
-      - name: Build
+      - name: Set env
-        run: >
+        run: |
-          nix build
+          TAG=${{ github.ref_name }}
-          .#trevstack-linux-amd64
+          VERSION=${TAG#v}
-          .#trevstack-linux-arm64
+          REPOSITORY=${{ github.repository }}
-          .#trevstack-linux-arm
+          NAME="${REPOSITORY}:${VERSION}"
-          .#trevstack-windows-amd64
+          REGISTRY="ghcr.io"
-          .#trevstack-darwin-amd64
-          .#trevstack-darwin-arm64
 
-      - name: Release
+          echo "VERSION=${VERSION}" >> $GITHUB_ENV
-        uses: softprops/action-gh-release@v2
+          echo "REPOSITORY=${REPOSITORY}" >> $GITHUB_ENV
-        with:
+          echo "NAME=${NAME}" >> $GITHUB_ENV
-          generate_release_notes: true
+          echo "REGISTRY=${REGISTRY}" >> $GITHUB_ENV
-          files: |-
-            result*/bin/*
-
-  # https://docs.docker.com/build/ci/github-actions/manage-tags-labels/
-  package:
-    runs-on: ubuntu-latest
-    needs: release # Wait for binary cache to propagate
-    steps:
-      - name: Docker meta
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          # list of Docker images to use as base name for tags
-          images: |
-            ghcr.io/${{ github.repository }}
-          # generate Docker tags based on the following events/attributes
-          tags: |
-            type=ref,event=branch
-            type=semver,pattern={{version}}
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
@@ -89,15 +104,42 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Set up QEMU
+      - name: Build & Load Images
-        uses: docker/setup-qemu-action@v3
+        run: |
+          nix build .#${REPOSITORY}-linux-amd64-image && ./result | docker load
+          nix build .#${REPOSITORY}-linux-arm64-image && ./result | docker load
+          nix build .#${REPOSITORY}-linux-arm-image && ./result | docker load
 
-      - name: Set up Docker Buildx
+      - name: Push Images
-        uses: docker/setup-buildx-action@v3
+        run: |
+          docker image tag ${NAME}-amd64 ${REGISTRY}/${NAME}-amd64
+          docker push ${REGISTRY}/${NAME}-amd64
 
-      - name: Build and push
+          docker image tag ${NAME}-arm64 ${REGISTRY}/${NAME}-arm64
-        uses: docker/build-push-action@v6
+          docker push ${REGISTRY}/${NAME}-arm64
-        with:
+
-          push: true
+          docker image tag ${NAME}-arm ${REGISTRY}/${NAME}-arm
-          tags: ${{ steps.meta.outputs.tags }}
+          docker push ${REGISTRY}/${NAME}-arm
-          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Push Manifest
+        run: |
+          docker manifest create ${REGISTRY}/${NAME} \
+            ${REGISTRY}/${NAME}-amd64 \
+            ${REGISTRY}/${NAME}-arm64 \
+            ${REGISTRY}/${NAME}-arm
+
+          docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-amd64 --arch amd64
+          docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-arm64 --arch arm64
+          docker manifest annotate ${REGISTRY}/${NAME} ${REGISTRY}/${NAME}-arm --arch arm
+
+          docker manifest create ${REGISTRY}/${REPOSITORY}:latest \
+            ${REGISTRY}/${NAME}-amd64 \
+            ${REGISTRY}/${NAME}-arm64 \
+            ${REGISTRY}/${NAME}-arm
+
+          docker manifest annotate ${REGISTRY}/${REPOSITORY}:latest ${REGISTRY}/${NAME}-amd64 --arch amd64
+          docker manifest annotate ${REGISTRY}/${REPOSITORY}:latest ${REGISTRY}/${NAME}-arm64 --arch arm64
+          docker manifest annotate ${REGISTRY}/${REPOSITORY}:latest ${REGISTRY}/${NAME}-arm --arch arm
+
+          docker manifest push ${REGISTRY}/${NAME}
+          docker manifest push ${REGISTRY}/${REPOSITORY}:latest

.scripts/bump.sh

@@ -19,7 +19,9 @@ echo "${version} -> ${next_version}"
 echo "bumping openapi"
 cd "${git_root}"
 sed -i -e "s/${version}/${next_version}/g" openapi.yaml
+sed -i -e "s/${version}/${next_version}/g" client/static/openapi/openapi.yaml
 git add openapi.yaml
+git add client/static/openapi/openapi.yaml
 
 echo "bumping client"
 cd "${git_root}/client"

Dockerfile

@@ -1,30 +0,0 @@
-# Nix builder
-FROM nixos/nix:latest AS builder
-
-# Copy our source and setup our working dir.
-COPY . /tmp/build
-WORKDIR /tmp/build
-
-# Build our Nix environment
-RUN nix \
-    --extra-experimental-features "nix-command flakes" \
-    --option filter-syscalls false \
-    --accept-flake-config \
-    build
-
-# Copy the Nix store closure into a directory. The Nix store closure is the
-# entire set of Nix store values that we need for our build.
-RUN mkdir /tmp/nix-store-closure
-RUN cp -R $(nix-store -qR result/) /tmp/nix-store-closure
-
-# Final image is based on scratch. We copy a bunch of Nix dependencies
-# but they're fully self-contained so we don't need Nix anymore.
-FROM scratch
-
-WORKDIR /app
-
-# Copy /nix/store
-COPY --from=builder /tmp/nix-store-closure /nix/store
-COPY --from=builder /tmp/build/result /app
-
-CMD ["/app/bin/trevstack"]

client/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "trevstack",
-	"version": "0.0.34",
+	"version": "0.0.40",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "trevstack",
-			"version": "0.0.34",
+			"version": "0.0.40",
 			"devDependencies": {
 				"@bufbuild/protovalidate": "^0.1.1",
 				"@connectrpc/connect": "^2.0.2",

client/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "trevstack",
 	"private": true,
-	"version": "0.0.34",
+	"version": "0.0.40",
 	"type": "module",
 	"scripts": {
 		"dev": "vite dev",

flake.lock

@@ -2,11 +2,11 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1746904237,
+        "lastModified": 1747179050,
-        "narHash": "sha256-3e+AVBczosP5dCLQmMoMEogM57gmZ2qrVSrmq9aResQ=",
+        "narHash": "sha256-qhFMmDkeJX9KJwr5H32f1r7Prs7XbQWtO0h3V0a0rFY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "d89fc19e405cb2d55ce7cc114356846a0ee5e956",
+        "rev": "adaa24fbf46737f3f1b5497bf64bae750f82942e",
         "type": "github"
       },
       "original": {

flake.nix

@@ -21,7 +21,7 @@
     ...
   }: let
     pname = "trevstack";
-    version = "0.0.34";
+    version = "0.0.40";
 
     build-systems = [
       "x86_64-linux"
@@ -83,7 +83,10 @@
         packages = with pkgs; [
           treli.packages."${system}".default
           git
+
+          # Nix
           nix-update
+          alejandra
 
           # Server
           go
@@ -127,7 +130,7 @@
           pname = "check-client";
           inherit version;
           src = ./client;
-          npmDepsHash = "sha256-F5DHJvvASnHh03Soa4L4jaDIC9LC9sUX0wDasYHcuDE=";
+          npmDepsHash = "sha256-PJzc3lVd7vvX/zGN3GbtbnCYL3tiPsndMFkzhESVcJw=";
           dontNpmInstall = true;
 
           buildPhase = ''
@@ -190,7 +193,7 @@
         client = pkgs.buildNpmPackage {
           inherit pname version;
           src = ./client;
-          npmDepsHash = "sha256-F5DHJvvASnHh03Soa4L4jaDIC9LC9sUX0wDasYHcuDE=";
+          npmDepsHash = "sha256-PJzc3lVd7vvX/zGN3GbtbnCYL3tiPsndMFkzhESVcJw=";
 
           installPhase = ''
             cp -r build "$out"
@@ -208,11 +211,8 @@
             HOME=$PWD
           '';
         };
-      in
+
-        {
+        binaries = builtins.listToAttrs (builtins.map (x: {
-          default = server;
-        }
-        // builtins.listToAttrs (builtins.map (x: {
             name = "${pname}-${x.GOOS}-${x.GOARCH}";
             value = server.overrideAttrs {
               nativeBuildInputs =
@@ -235,7 +235,28 @@
               '';
             };
           })
-          host-systems)
+          host-systems);
+
+        images = builtins.listToAttrs (builtins.map (x: {
+            name = "${pname}-${x.GOOS}-${x.GOARCH}-image";
+            value = pkgs.dockerTools.streamLayeredImage {
+              name = "${pname}";
+              tag = "${version}-${x.GOARCH}";
+              created = "now";
+              architecture = "${x.GOARCH}";
+              contents = [binaries."${pname}-${x.GOOS}-${x.GOARCH}"];
+              config = {
+                Cmd = ["${binaries."${pname}-${x.GOOS}-${x.GOARCH}"}/bin/${pname}-${x.GOOS}-${x.GOARCH}-${version}"];
+              };
+            };
+          })
+          (builtins.filter (x: x.GOOS == "linux") host-systems));
+      in
+        {
+          default = server;
+        }
+        // binaries
+        // images
     );
   };
 }

openapi.yaml

@@ -3,7 +3,7 @@ servers:
   - url: /grpc
 info:
   title: Trevstack API
-  version: 0.0.34
+  version: 0.0.40
   description: API for Trevstack
   contact:
     name: Trev