Repository navigation

feat(macos): use full-bleed app icon artwork for icon generation #50

	name: CI

	on:
	pull_request:
	branches:
	- main
	paths:
	- "macos/**"
	- "versions.sh"
	- ".github/workflows/ci.yml"
	workflow_dispatch: {}

	concurrency:
	group: ci-${{ github.head_ref \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	test:
	name: Test and Package (unsigned)
	runs-on: macos-latest
	timeout-minutes: 20
	permissions:
	contents: read
	steps:
	- name: Checkout Code
	uses: actions/checkout@v4

	- name: Cache Swift build
	uses: actions/cache@v4
	with:
	# Only the debug build used by `swift test` is cached. The release
	# slices in .build-artifacts are intentionally built from a clean
	# scratch path every time (see build-thin.sh), so caching them would
	# be a no-op.
	path: macos/.build
	key: swift-${{ runner.os }}-${{ hashFiles('macos/Package.swift', 'macos/Sources/', 'macos/Tests/', 'macos/tools/fetch-sparkle.sh') }}
	restore-keys: \|
	swift-${{ runner.os }}-

	- name: Vendor Sparkle (pinned checksum)
	working-directory: macos
	run: tools/fetch-sparkle.sh

	- name: Test and build unsigned package
	working-directory: macos
	# package-unsigned.sh mandatorily runs the full swift test suite via
	# run_tests, so a separate `swift test` step would run everything twice.
	run: scripts/package-unsigned.sh

	- name: Upload unsigned artifacts
	uses: actions/upload-artifact@v4
	with:
	name: unsigned-dmg
	path: \|
	macos/dist/unsigned/*.dmg
	macos/dist/unsigned/manifest.txt
	macos/dist/unsigned/SHA256SUMS
	if-no-files-found: error