build: Add GitHub actions configuration

.github/workflows/hydrun.yaml

@@ -3,13 +3,16 @@ name: hydrun CI
 on:
   push:
   pull_request:
-
-permissions:
-  contents: write
+  schedule:
+    - cron: "0 0 * * 0"
 
 jobs:
   build-linux:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     strategy:
       matrix:
         target:
@@ -22,11 +25,11 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v3
       - name: Set up hydrun
         run: |
           curl -L -o /tmp/hydrun "https://github.com/pojntfx/hydrun/releases/latest/download/hydrun.linux-$(uname -m)"
@@ -37,32 +40,43 @@ jobs:
       - name: Fix permissions for output
         run: sudo chown -R $USER .
       - name: Upload output
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.target.id }}
           path: ${{ matrix.target.dst }}
+
   publish-linux:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pages: write
+      id-token: write
     needs: build-linux
+    environment:
+      name: github-pages
+      url: ${{ steps.publish.outputs.page_url }}
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Download output
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           path: /tmp/out
-      - name: Isolate the repositories
+      - name: Isolate the PWA from the other artifacts
         run: |
           mkdir -p /tmp/github-pages
           tar xvzf /tmp/out/pwa/*.tar.gz -C /tmp/github-pages
           touch /tmp/github-pages/.nojekyll
+      - name: Extract branch name
+        id: extract_branch
+        run: echo "##[set-output name=branch;]$(echo ${GITHUB_REF#refs/heads/})"
       - name: Publish pre-release to GitHub releases
         if: ${{ github.ref == 'refs/heads/main' }}
         uses: marvinpinto/action-automatic-releases@latest
         with:
           repo_token: "${{ secrets.GITHUB_TOKEN }}"
-          automatic_release_tag: unstable
+          automatic_release_tag: release-${{ steps.extract_branch.outputs.branch }}
           prerelease: true
           files: |
             /tmp/out/*/*
@@ -74,11 +88,15 @@ jobs:
           prerelease: false
           files: |
             /tmp/out/*/*
-      - name: Publish release to GitHub pages
+      - name: Setup GitHub Pages
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: JamesIves/[email protected]
+        uses: actions/configure-pages@v5
+      - name: Upload GitHub Pages artifact
+        if: startsWith(github.ref, 'refs/tags/v')
+        uses: actions/upload-pages-artifact@v3
         with:
-          branch: gh-pages
-          folder: /tmp/github-pages
-          git-config-name: GitHub Pages Bot
-          git-config-email: [email protected]
+          path: /tmp/github-pages/
+      - name: Publish to GitHub pages
+        if: startsWith(github.ref, 'refs/tags/v')
+        id: publish
+        uses: actions/deploy-pages@v4