next.orly.dev/.github/workflows/go.yml

# This workflow will build a golang project
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go
#
# NOTE: All builds use CGO_ENABLED=0 since p8k library uses purego (not CGO)
#       The library dynamically loads libsecp256k1 at runtime via purego
#
# Release Process:
# 1. Update the version in the pkg/version/version file (e.g. v1.2.3)
# 2. Create and push a tag matching the version:
#    git tag v1.2.3
#    git push origin v1.2.3
# 3. The workflow will automatically:
#    - Build binaries for multiple platforms (Linux, macOS, Windows)
#    - Create a GitHub release with the binaries
#    - Generate release notes

name: Go

on:
  push:
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: "1.25"

      - name: Install libsecp256k1 (runtime optional)
        run: |
          sudo apt-get update
          sudo apt-get install -y autoconf automake libtool pkg-config
          
          # Build and install libsecp256k1 for runtime performance boost
          git clone https://github.com/bitcoin-core/secp256k1.git /tmp/secp256k1
          cd /tmp/secp256k1
          ./autogen.sh
          ./configure --enable-module-recovery --enable-module-ecdh --enable-module-schnorrsig --enable-module-extrakeys
          make
          sudo make install
          sudo ldconfig

      - name: Build (Pure Go + purego)
        run: CGO_ENABLED=0 go build -v ./...

      - name: Test (Pure Go + purego)
        run: CGO_ENABLED=0 go test -v $(go list ./... | xargs -n1 sh -c 'ls $0/*_test.go 1>/dev/null 2>&1 && echo $0' | grep .)
  release:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write

    steps:
      - uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: '1.25'

      - name: Install libsecp256k1 (for bundling with releases)
        if: startsWith(github.ref, 'refs/tags/v')
        run: |
          sudo apt-get update
          sudo apt-get install -y autoconf automake libtool pkg-config
          
          # Build and install libsecp256k1
          git clone https://github.com/bitcoin-core/secp256k1.git /tmp/secp256k1
          cd /tmp/secp256k1
          ./autogen.sh
          ./configure --enable-module-recovery --enable-module-ecdh --enable-module-schnorrsig --enable-module-extrakeys
          make
          sudo make install
          sudo ldconfig

      - name: Build Release Binaries (Pure Go + purego)
        if: startsWith(github.ref, 'refs/tags/v')
        run: |
          # Extract version from tag (e.g., v1.2.3 -> 1.2.3)
          VERSION=${GITHUB_REF#refs/tags/v}
          echo "Building release binaries for version $VERSION (pure Go + purego)"

          # Create directory for binaries
          mkdir -p release-binaries

          # Build for Linux AMD64 (pure Go with purego)
          echo "Building Linux AMD64 (pure Go + purego)..."
          GOEXPERIMENT=greenteagc,jsonv2 GOOS=linux GOARCH=amd64 CGO_ENABLED=0 \
            go build -ldflags "-s -w" -o release-binaries/orly-${VERSION}-linux-amd64 .
          
          # Copy libsecp256k1.so for Linux (runtime optional, for performance)
          if [ -f pkg/crypto/p8k/libsecp256k1.so ]; then
            cp pkg/crypto/p8k/libsecp256k1.so release-binaries/libsecp256k1-linux-amd64.so
          elif [ -f /usr/local/lib/libsecp256k1.so.2 ]; then
            cp /usr/local/lib/libsecp256k1.so.2 release-binaries/libsecp256k1-linux-amd64.so
          fi

          # Build for Linux ARM64 (pure Go with purego)
          echo "Building Linux ARM64 (pure Go + purego)..."
          GOEXPERIMENT=greenteagc,jsonv2 GOOS=linux GOARCH=arm64 CGO_ENABLED=0 \
            go build -ldflags "-s -w" -o release-binaries/orly-${VERSION}-linux-arm64 .
          
          # Build for macOS (pure Go with purego)
          echo "Building macOS AMD64 (pure Go + purego)..."
          GOEXPERIMENT=greenteagc,jsonv2 GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 \
            go build -ldflags "-s -w" -o release-binaries/orly-${VERSION}-darwin-amd64 .
          
          echo "Building macOS ARM64 (pure Go + purego)..."
          GOEXPERIMENT=greenteagc,jsonv2 GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 \
            go build -ldflags "-s -w" -o release-binaries/orly-${VERSION}-darwin-arm64 .

          # Build for Windows (pure Go with purego)
          echo "Building Windows AMD64 (pure Go + purego)..."
          GOEXPERIMENT=greenteagc,jsonv2 GOOS=windows GOARCH=amd64 CGO_ENABLED=0 \
            go build -ldflags "-s -w" -o release-binaries/orly-${VERSION}-windows-amd64.exe .

          # Note: Only building orly binary as requested
          # Other cmd utilities (aggregator, benchmark, convert, policytest, stresstest) are development tools

          # Create checksums
          cd release-binaries
          sha256sum * > SHA256SUMS.txt
          cd ..

      - name: Create GitHub Release
        if: startsWith(github.ref, 'refs/tags/v')
        uses: softprops/action-gh-release@v1
        with:
          files: release-binaries/*
          draft: false
          prerelease: false
          generate_release_notes: true