fix gh actions

Author: fdch

.github/actions/setup-deken/action.yml

@@ -0,0 +1,12 @@
+name: Setup Deken
+description: Download and install the deken commandline utility.
+
+runs:
+  using: composite
+  steps:
+    - name: install deken
+      shell: bash
+      run: |
+        curl -L https://raw.githubusercontent.com/pure-data/deken/main/developer/deken -o deken
+        chmod +x deken
+        deken --version

.github/actions/setup-pd/action.yml

@@ -4,13 +4,14 @@ description: Checkout code and setup Pure Data dependencies
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@v5
     - name: get pdlibbuilder
-      run: git submodule init && git submodule update
       shell: bash
+      run: |
+        git submodule init
+        git submodule update
 
     - name: get pd
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         repository: pure-data/pure-data
         path: pure-data

.github/workflows/main.yml

@@ -9,6 +9,7 @@ on:
       - "src/**"
       - "Makefile"
       - "config.sh"
+    tags: ['v*']
 
   pull_request:
     paths:
@@ -33,7 +34,10 @@ jobs:
       PDVERSION: pd-0.56-2
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
+
+      - name: setup deken
+        uses: ./.github/actions/setup-deken
 
       # ---- platform-specific setup ----
       - name: setup pd (unix)
@@ -65,66 +69,44 @@ jobs:
         run: make pdbinpath="$PDVERSION/bin" PDINCLUDEDIR="$PDVERSION/src" CFLAGS=-march=x86-64
 
       # ---- package ----
-      - name: package (unix)
-        if: matrix.os != 'windows-latest'
-        run: make install PDLIBDIR="${{ matrix.os }}"
-      - name: package (windows)
-        if: matrix.os == 'windows-latest'
+      - name: package library
         run: |
           bash scripts/package_lib.sh
           ls -la
           mkdir -p "${{ matrix.os }}"
-          mv fd_lib "${{ matrix.os }}/"
+          cp -r fd_lib "${{ matrix.os }}/"
+
+      - name: create deken packages
+        run: |
+          mkdir -p build
+          for dir in fd_lib-*; do
+            ./deken package --output-dir ./build --no-sign-gpg --name fd_lib --version "${{ github.ref_name }}" "$dir"
+          done
 
       - name: upload artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
-          name: fd_lib-${{ matrix.os }}
-          path: ${{ matrix.os }}/fd_lib
+          name: "fd_lib-${{ github.ref_name }}-build"
+          path: ./build
+          if-no-files-found: error
+          compression-level: 0
 
   publish:
     runs-on: ubuntu-latest
     needs: build
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    if: startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main'
 
     steps:
-      - name: download all artifacts
-        uses: actions/download-artifact@v5
-
-      - name: install deken
-        run: |
-          curl -L https://raw.githubusercontent.com/pure-data/deken/main/developer/deken -o deken
-          chmod +x deken
-
-      - name: list files
-        run: ls -R
+      - name: setup deken
+        uses: ./.github/actions/setup-deken
 
-      - name: import gpg key
-        run: |
-          echo "$GPG_PRIVATE_KEY" | gpg --batch --import
-
-          # trust the key (required in CI)
-          KEY_ID=$(gpg --list-secret-keys --with-colons | awk -F: '/^sec/ {print $5; exit}')
-          echo "5\ny\n" | gpg --command-fd 0 --batch --yes --edit-key $KEY_ID trust
-        env:
-          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-
-      - name: configure gpg
-        run: |
-          mkdir -p ~/.gnupg
-          chmod 700 ~/.gnupg
-          echo "use-agent" >> ~/.gnupg/gpg.conf
-          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
-
-      - name: package all
-        run: |
-          for dir in fd_lib-*; do
-            ./deken package --version "${GITHUB_REF_NAME:-main}" "$dir"
-          done
+      - name: download all artifacts
+        uses: actions/download-artifact@v8
+        with:
+          skip-decompress: true
 
       - name: upload all to deken
         env:
           deken_username: ${{ secrets.DEKEN_USERNAME }}
           deken_password: ${{ secrets.DEKEN_PASSWORD }}
-        run: ./deken upload *.dek
+        run: ./deken upload **/*.dek