CNX-311 Sign releases with Digicert on tag push

.config/dotnet-tools.json

@@ -6,13 +6,15 @@
       "version": "0.28.2",
       "commands": [
         "dotnet-csharpier"
-      ]
+      ],
+      "rollForward": false
     },
     "gitversion.tool": {
-      "version": "5.12.0",
+      "version": "6.0.2",
       "commands": [
         "dotnet-gitversion"
-      ]
+      ],
+      "rollForward": false
     }
   }
 }

.github/workflows/main.yml

@@ -3,7 +3,7 @@ name: .NET Build and Publish
 on:
   push:
     branches: ["main", "dev"] # Continuous delivery on every long-lived branch
-    tags: ["3.*"] # Manual delivery on every 3.x tag
+    tags: ["v3.*"] # Manual delivery on every 3.x tag
 
 jobs:
   build:
@@ -20,8 +20,8 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: 8.0.2xx # Align with global.json (including roll forward rules)
-      
-      - name: Cache Nuget     
+
+      - name: Cache Nuget
         uses: actions/cache@v4
         with:
           path: ~/.nuget/packages
@@ -42,24 +42,28 @@ jobs:
 
       - id: set-version
         name: Set version to output
-        run: echo "version=${{ env.GitVersion_FullSemVer }}" >> "$Env:GITHUB_OUTPUT"   
+        run: echo "version=${{ env.GitVersion_FullSemVer }}" >> "$Env:GITHUB_OUTPUT"
+
   deploy-installers:
-   runs-on: ubuntu-latest
-   needs: build
-   steps:
-     - name: 🔫 Trigger Build Installers
-       uses: ALEEF02/workflow-dispatch@v3.0.0
-       with:
-         workflow: Build Installers
-         repo: specklesystems/connector-installers
-         token: ${{ secrets.CONNECTORS_GH_TOKEN }}
-         inputs: '{ "run_id": "${{ github.run_id }}", "version": "${{ needs.build.outputs.version }}" }'
-         ref: main
-         wait-for-completion: true
-         wait-for-completion-interval: 10s
-         wait-for-completion-timeout: 10m
-         display-workflow-run-url: true
-         display-workflow-run-url-interval: 10s
+    runs-on: ubuntu-latest
+    needs: build
+    env:
+      IS_TAG_BUILD: ${{ github.ref_type == 'tag' }}
+    steps:
+      - name: 🔫 Trigger Build Installers
+        uses: ALEEF02/workflow-dispatch@v3.0.0
+        with:
+          workflow: Build Installers
+          repo: specklesystems/connector-installers
+          token: ${{ secrets.CONNECTORS_GH_TOKEN }}
+          inputs: '{ "run_id": "${{ github.run_id }}", "version": "${{ needs.build.outputs.version }}", "public_release": ${{ env.IS_TAG_BUILD }} }'
+          ref: main
+          wait-for-completion: true
+          wait-for-completion-interval: 10s
+          wait-for-completion-timeout: 10m
+          display-workflow-run-url: true
+          display-workflow-run-url-interval: 10s
+
   test:
     runs-on: ubuntu-latest
     steps:
@@ -70,18 +74,18 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: 8.0.2xx # Align with global.json (including roll forward rules)
-      
-      - name: Cache Nuget     
+
+      - name: Cache Nuget
         uses: actions/cache@v4
         with:
           path: ~/.nuget/packages
           key: ${{ runner.os }}-nuget-${{ hashFiles('**/packages.lock.json') }}
 
       - name: ⚒️ Run build
         run: ./build.sh test-only
-        
+
       - name: Upload coverage reports to Codecov with GitHub Action
         uses: codecov/codecov-action@v4
         with:
           file: Converters/**/coverage.xml
-          token: ${{ secrets.CODECOV_TOKEN }}
+          token: ${{ secrets.CODECOV_TOKEN }}

GitVersion.yml

@@ -1,11 +1,10 @@
+workflow: GitFlow/v1
 next-version: 3.0.0
-mode: ContinuousDelivery
-assembly-informational-format: "{Major}.{Minor}.{Patch}-{PreReleaseTag}"
+mode: ManualDeployment
 branches:
   main:
-    regex: ^main$
-    tag: rc
+    label: rc
   develop:
-    tag: beta
-  pull-request:
-    tag: pr
+    label: beta
+  unknown:
+    increment: None