From 4268b28d95fdcc778ead9e0ba4b457ac1b3b6987 Mon Sep 17 00:00:00 2001
From: Benedek Farkas <benedek.farkas@lombiq.com>
Date: Mon, 29 Sep 2025 20:53:30 +0200
Subject: [PATCH] Adding release package workflow (#8846)

* Updating release-package workflow

* Updating 3rd-party actions to their latest versions

* Testing artifact upload without separate compress step to avoid double-zipping [skip ci]

Hopefully it doesn't have horrible performance anymore

* Updating release-package workflow [skip ci]
---
 .../build-crowdin-translation-packages.yml    |  4 +--
 .github/workflows/compile.yml                 |  8 ++---
 .github/workflows/release-package.yml         | 29 +++++++++++++++++++
 .github/workflows/specflow.yml                |  2 +-
 4 files changed, 36 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build-crowdin-translation-packages.yml b/.github/workflows/build-crowdin-translation-packages.yml
index 91099d866..de8f128e0 100644
--- a/.github/workflows/build-crowdin-translation-packages.yml
+++ b/.github/workflows/build-crowdin-translation-packages.yml
@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Orchard CMS
-        uses: andrii-bodnar/crowdin-request-action@aac9a865d62b37060b0ce530db5ac5cfca02dd2c # 0.0.2
+        uses: andrii-bodnar/crowdin-request-action@ee7a2af9564d8934b5b4a8427185aaaffee0165e # v0.3.0
         with:
           route: POST /projects/{projectId}/translations/builds
           projectId: 46524
@@ -19,7 +19,7 @@ jobs:
           CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_API_TOKEN }}
 
       - name: Orchard CMS Gallery
-        uses: andrii-bodnar/crowdin-request-action@aac9a865d62b37060b0ce530db5ac5cfca02dd2c # 0.0.2
+        uses: andrii-bodnar/crowdin-request-action@ee7a2af9564d8934b5b4a8427185aaaffee0165e # v0.3.0
         with:
           route: POST /projects/{projectId}/translations/builds
           projectId: 63766
diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml
index 9b10455f3..5a2455a24 100644
--- a/.github/workflows/compile.yml
+++ b/.github/workflows/compile.yml
@@ -18,13 +18,13 @@ jobs:
     runs-on: windows-2025
     steps:
       - name: Clone Repository
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Restore NuGet Packages
         run: nuget restore src/Orchard.sln
 
       - name: Add MSBuild to PATH
-        uses: microsoft/setup-msbuild@v2
+        uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2.0.0
 
       - name: Compile
         run: msbuild Orchard.proj /m /v:minimal /t:Compile /p:TreatWarningsAsErrors=true -WarnAsError /p:MvcBuildViews=true
@@ -70,10 +70,10 @@ jobs:
     runs-on: windows-2025
     steps:
       - name: Clone Repository
-        uses: actions/checkout@v4.1.1
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup NodeJS
-        uses: actions/setup-node@v4.0.2
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: 7
 
diff --git a/.github/workflows/release-package.yml b/.github/workflows/release-package.yml
index 3db697f0a..8432969db 100644
--- a/.github/workflows/release-package.yml
+++ b/.github/workflows/release-package.yml
@@ -8,3 +8,32 @@ jobs:
   release-package:
     name: Release Package
     runs-on: Windows-2025
+    defaults:
+      run:
+        shell: cmd
+    steps:
+      - name: Clone Repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+
+      - name: Restore NuGet Packages
+        run: nuget restore src/Orchard.sln
+
+      - name: Add MSBuild to PATH
+        uses: microsoft/setup-msbuild@6fb02220983dee41ce7ae257b6f4d8f9bf5ed4ce # v2.0.0
+
+      - name: Build Precompiled Application
+        run: msbuild Orchard.proj /m /v:minimal /t:Precompiled
+
+      - name: Generate Release Package Name
+        id: package-name
+        shell: pwsh
+        run: |
+          $packageName = "Orchard-$('${{ github.ref_name }}'.Replace('/', '_'))-${{ github.sha }}"
+          "package-name=$packageName" >> $Env:GITHUB_OUTPUT
+
+      - name: Upload Release Package
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: ${{ steps.package-name.outputs.package-name }}
+          path: .\build\Precompiled
+          if-no-files-found: error
diff --git a/.github/workflows/specflow.yml b/.github/workflows/specflow.yml
index 5bd87d61a..c36a2e5e4 100644
--- a/.github/workflows/specflow.yml
+++ b/.github/workflows/specflow.yml
@@ -39,7 +39,7 @@ jobs:
         shell: cmd
     steps:
       - name: Clone Repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           ref: ${{ matrix.branch }}