feat: [OCISDEV-783] release pipeline

[mklos-kw]

Release Expected State

Reference release: v8.0.1

1. GitHub Release page

Property	Expected
tag_name	v{VERSION}
name	{VERSION} (no v prefix)
draft	false
prerelease	false for stable, true if version contains -
target_commitish	master (or active stable branch)

2. Release assets — exact file set (14 files)

ocis-{VERSION}-darwin-amd64
ocis-{VERSION}-darwin-amd64.sha256
ocis-{VERSION}-darwin-arm64
ocis-{VERSION}-darwin-arm64.sha256
ocis-{VERSION}-linux-386
ocis-{VERSION}-linux-386.sha256
ocis-{VERSION}-linux-amd64
ocis-{VERSION}-linux-amd64.sha256
ocis-{VERSION}-linux-arm
ocis-{VERSION}-linux-arm.sha256
ocis-{VERSION}-linux-arm64
ocis-{VERSION}-linux-arm64.sha256
End-User-License-Agreement-for-ownCloud-Infinite-Scale.pdf
third-party-licenses.tar.gz

3. Binary file checks

File	ELF/Mach-O header
linux-amd64	ELF 64-bit x86-64
linux-arm64	ELF 64-bit aarch64
linux-arm	ELF 32-bit ARM
linux-386	ELF 32-bit Intel 80386
darwin-amd64	Mach-O 64-bit x86_64
darwin-arm64	Mach-O 64-bit arm64

4. .sha256 file checks

• Each .sha256 file is 87–90 bytes
• Content format: {sha256hash} {filename} (two spaces, standard sha256sum output)
• The hash inside the file must match sha256sum of the corresponding binary

5. third-party-licenses.tar.gz

• Valid gzip (file reports gzip compressed data)

6. EULA PDF

• Valid PDF (file reports PDF document)
• Exact filename: End-User-License-Agreement-for-ownCloud-Infinite-Scale.pdf

7. Docker images (production release only)

Image	Tags	Architectures
owncloud/ocis-rolling	{VERSION}, {MAJOR}.{MINOR}, {MAJOR}	linux/amd64, linux/arm64
owncloud/ocis	{VERSION}, {MAJOR}.{MINOR}, {MAJOR}	linux/amd64, linux/arm64

Verify:

docker buildx imagetools inspect owncloud/ocis:{VERSION}
# must show linux/amd64 and linux/arm64 manifests

8. Git tag

git tag -v v{VERSION}          # must be a signed tag
git cat-file -p v{VERSION} | grep "^object"  # must point to a commit on master

9. Release content audit scripts/audit-release.py

➜  GITHUB_TOKEN=<token> python3 scripts/audit-release.py --version 8.0.1 --github-release --docker --git 2>&1
[PASS] tag_name: v8.0.1
[PASS] name: 8.0.1
[PASS] draft: false
[PASS] prerelease: False
[PASS] assets: all 14 present
[PASS] owncloud/ocis-rolling:8.0.1: amd64+arm64 present
[PASS] owncloud/ocis:8.0.1: amd64+arm64 present
[WARN] v8.0.1: not a signed tag
[PASS] v8.0.1: object bb5c6c2c929e4e67e263ec3efd04e68a2c08b938

8 checks: 8 passed, 0 failed
➜  GITHUB_TOKEN=<token> python3 scripts/audit-release.py --version 8.0.0 --github-release --docker --git 2>&1
[PASS] tag_name: v8.0.0
[PASS] name: 8.0.0
[PASS] draft: false
[PASS] prerelease: False
[PASS] assets: all 14 present
[PASS] owncloud/ocis-rolling:8.0.0: amd64+arm64 present
[PASS] owncloud/ocis:8.0.0: amd64+arm64 present
[WARN] v8.0.0: not a signed tag
[PASS] v8.0.0: object 6bede1a396bbe525554c9bb16bb91ef7bef16c4a

8 checks: 8 passed, 0 failed

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation ticket raised:

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.