workflow updates

.forgejo/workflows/nix.yaml

@@ -0,0 +1,47 @@
+name: "CI"
+on:
+  pull_request:
+  push:
+
+jobs:
+  checks:
+    runs-on: nix
+    steps:
+      - uses: actions/checkout@v4
+      - uses: https://codeberg.org/icewind/attic-action@v1
+        with:
+          name: link
+          instance: https://cache.icewind.link
+          authToken: "${{ secrets.ATTIC_TOKEN }}"
+      - run: nix flake check --keep-going
+
+  build:
+    runs-on: nix
+    needs: checks
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - binary-suffix: ".exe"
+            target: x86_64-pc-windows-gnu
+          - binary-suffix: ""
+            target: x86_64-unknown-linux-musl
+          - binary-suffix: ""
+            target: i686-unknown-linux-musl
+          - binary-suffix: ""
+            target: armv7-unknown-linux-musleabihf
+          - binary-suffix: ""
+            target: aarch64-unknown-linux-musl
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: https://codeberg.org/icewind/attic-action@v1
+        with:
+          name: link
+          instance: https://cache.icewind.link
+          authToken: "${{ secrets.ATTIC_TOKEN }}"
+      - run: nix build .#${{ matrix.target }}
+      - uses: https://code.forgejo.org/forgejo/upload-artifact@v4
+        with:
+          name: palantir-${{ matrix.target }}
+          path: result/bin/palantir${{ matrix.binary-suffix }}

.forgejo/workflows/release.yml

@@ -0,0 +1,41 @@
+name: Release
+
+on:
+  release:
+    types: [created]
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    runs-on: nix
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - binary-suffix: ".exe"
+            target: x86_64-pc-windows-gnu
+          - binary-suffix: ""
+            target: x86_64-unknown-linux-musl
+          - binary-suffix: ""
+            target: i686-unknown-linux-musl
+          - binary-suffix: ""
+            target: armv7-unknown-linux-musleabihf
+          - binary-suffix: ""
+            target: aarch64-unknown-linux-musl
+    steps:
+      - uses: actions/checkout@v4
+      - uses: https://codeberg.org/icewind/attic-action@v1
+        with:
+          name: link
+          instance: https://cache.icewind.link
+          authToken: "${{ secrets.ATTIC_TOKEN }}"
+      - run: nix build .#${{ matrix.target }}
+      - name: Upload binary to release
+        uses: https://github.com/svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: result/bin/palantir${{ matrix.binary-suffix }}
+          asset_name: palantir-${{ matrix.target }}${{ matrix.binary-suffix }}
+          tag: ${{ github.ref }}