add web extension to release

.gitea/workflows/release/build-and-release.yaml

@@ -6,8 +6,30 @@ on:
       - v**
 
 jobs:
+  webext-build:
+    runs-on: ubuntu-latest
+    container:
+      image: node:24
+    steps:
+      - name: Checkout repository
+        uses: https://github.com/actions/checkout@v4
+      - name: Install dependencies
+        run: cd web-extension/cl && npm install
+      - name: Build and sign web extension
+        env:
+          AMO_API_KEY: ${{ secrets.AMO_API_KEY }}
+          AMO_API_SECRET: ${{ secrets.AMO_API_SECRET }}
+        run: cd web-extension/cl && npm run sign
+      - name: Upload web extension artifact
+        uses: https://github.com/actions/upload-artifact@v4
+        with:
+          name: webext-xpi
+          path: web-extension/cl/web-ext-artifacts/*.xpi
+          if-no-files-found: error
+
   build-and-release:
     runs-on: ubuntu-latest
+    needs: [webext-build]
     steps:
       - name: Checkout repository
         uses: https://github.com/actions/checkout@v4
@@ -16,18 +38,18 @@ jobs:
       - name: Install cargo-deb
         run: cargo install --quiet cargo-deb
       - name: Build Debian package
-        run: cargo deb
+        run: cargo deb --quiet
       - name: Upload Debian package to Gitea registry
         env:
-          GITEA_OWNER: ${{ github.repository_owner }}
+          GITEA_OWNER: ${{ vars.PUBLISH_USERNAME }}
           GITEA_SERVER_URL: ${{ github.server_url }}
+          GITEA_TOKEN: ${{ secrets.PUBLISH_TOKEN }}
           DEB_DISTRIBUTIONS: noble,plucky,questing
           DEB_COMPONENT: main
           DEB_ARCH: amd64
         run: |
           set -euo pipefail
           DEB_FILE=$(ls target/debian/*.deb | head -n1)
-          env
           if [ -z "${DEB_FILE}" ]; then
             echo "No .deb file found in target/debian" >&2
             exit 1
@@ -41,11 +63,11 @@ jobs:
               --upload-file "${DEB_FILE}" \
               "${GITEA_SERVER_URL}/api/packages/${GITEA_OWNER}/debian/pool/${DISTRO}/main/upload"
           done
-      - name: Read release content
-        uses: https://github.com/jaywcjlove/github-action-read-file@main
-        id: read_release
+      - name: Download web extension artifact
+        uses: https://github.com/actions/download-artifact@v4
         with:
-          path: .changes/${{ github.ref_name }}.md
+          name: webext-xpi
+          path: web-extension/cl/web-ext-artifacts
       - name: Release
         uses: https://gitea.com/akkuman/gitea-release-action@v1
         env:
@@ -53,6 +75,9 @@ jobs:
         with:
           files: |-
             config.toml.dist
+            web-extension/cl/web-ext-artifacts/*.xpi
           md5sum: true
           sha256sum: true
-          body_path: .changes/${{ github.ref_name }}.md
+          body: Test release
+          prerelease: true
+          #body_path: .changes/${{ github.ref_name }}.md

web-extension/cl/.web-extension-id

@@ -0,0 +1,3 @@
+# This file was created by https://github.com/mozilla/web-ext
+# Your auto-generated extension ID for addons.mozilla.org is:
+helper@champs-libres-coop

web-extension/cl/manifest.json

@@ -5,7 +5,10 @@
   "browser_specific_settings": {
     "gecko": {
       "id": "helper@champs-libres-coop",
-      "strict_min_version": "143.0"
+      "strict_min_version": "143.0",
+      "data_collection_permissions": {
+        "required": ["none"]
+      }
     }
   },
 

web-extension/cl/package.json

@@ -7,7 +7,8 @@
     "test": "echo \"Error: no test specified\" && exit 1",
     "check": "tsc --noEmit",
     "build": "tsc",
-    "package": "tsc && web-ext build --overwrite-dest"
+    "package": "tsc && web-ext build --overwrite-dest",
+    "sign": "tsc && web-ext build --overwrite-dest && web-ext sign --use-submission-api --api-key $AMO_API_KEY --api-secret $AMO_API_SECRET --channel unlisted"
   },
   "keywords": [],
   "author": "",