feat: cache release binary in action

.gitea/workflows/action-validation.yml

@@ -0,0 +1,102 @@
+name: Action Validation
+
+on:
+  push:
+    branches:
+      - "**"
+    tags-ignore:
+      - "*"
+  workflow_dispatch:
+
+jobs:
+  validate-released-binary:
+    runs-on: ubuntu-latest
+    container: docker.io/catthehacker/ubuntu:act-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner_arch: X64
+            asset_arch: amd64
+            run_command: ./vociferate
+          - runner_arch: ARM64
+            asset_arch: arm64
+            run_command: qemu-aarch64-static ./vociferate
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install arm64 emulator
+        if: ${{ matrix.runner_arch == 'ARM64' }}
+        run: |
+          set -euo pipefail
+          apt-get update
+          apt-get install -y qemu-user-static
+
+      - name: Resolve latest released binary
+        id: resolve-binary
+        env:
+          API_URL: ${{ github.api_url }}
+          SERVER_URL: ${{ github.server_url }}
+          TOKEN: ${{ github.token }}
+          ASSET_ARCH: ${{ matrix.asset_arch }}
+        run: |
+          set -euo pipefail
+
+          release_tag="$(curl -fsSL \
+            -H "Authorization: token ${TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${API_URL}/repos/aether/vociferate/releases/latest" | sed -n 's/.*"tag_name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1)"
+
+          if [[ -z "$release_tag" ]]; then
+            echo "Unable to resolve latest vociferate release" >&2
+            exit 1
+          fi
+
+          normalized_version="${release_tag#v}"
+          asset_name="vociferate_${normalized_version}_linux_${ASSET_ARCH}"
+          asset_url="${SERVER_URL}/aether/vociferate/releases/download/${release_tag}/${asset_name}"
+
+          echo "release_tag=$release_tag" >> "$GITHUB_OUTPUT"
+          echo "asset_name=$asset_name" >> "$GITHUB_OUTPUT"
+          echo "asset_url=$asset_url" >> "$GITHUB_OUTPUT"
+
+      - name: Download released binary
+        env:
+          TOKEN: ${{ github.token }}
+          ASSET_URL: ${{ steps.resolve-binary.outputs.asset_url }}
+        run: |
+          set -euo pipefail
+
+          curl --fail --location \
+            -H "Authorization: token ${TOKEN}" \
+            -o vociferate \
+            "$ASSET_URL"
+          chmod +x vociferate
+
+      - name: Smoke test released binary
+        env:
+          RUN_COMMAND: ${{ matrix.run_command }}
+        run: |
+          set -euo pipefail
+
+          recommended_tag="$($RUN_COMMAND --recommend --root .)"
+          case "$recommended_tag" in
+            v*.*.*)
+              ;;
+            *)
+              echo "Unexpected recommended tag: $recommended_tag" >&2
+              exit 1
+              ;;
+          esac
+
+          {
+            echo "## Released Binary Validation"
+            echo
+            echo "- Release tag: ${{ steps.resolve-binary.outputs.release_tag }}"
+            echo "- Asset: ${{ steps.resolve-binary.outputs.asset_name }}"
+            echo "- Recommended tag: ${recommended_tag}"
+          } >> "$GITHUB_STEP_SUMMARY"