Consolidate goreleaser config into .goreleaser-release.yaml

Single config with two build IDs (unix/windows), full ldflags via YAML
anchors, and jsign signing hook that's a no-op when JSIGN_JAR is unset.
Still uses dummy binary for fast iteration. When ready, remove the
`main:` field and this becomes the production release config.

Co-authored-by: Isaac

Author: pietern

.github/workflows/release-test.yml

@@ -40,7 +40,7 @@ jobs:
           go-version-file: go.mod
           cache-dependency-path: |
             go.sum
-            .goreleaser-test.yaml
+            .goreleaser-release.yaml
 
       - name: Configure Go module proxy via JFrog
         run: jf goc --repo-resolve=db-golang
@@ -77,7 +77,7 @@ jobs:
         uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
         with:
           version: ~> v2
-          args: release -f .goreleaser-test.yaml --snapshot
+          args: release -f .goreleaser-release.yaml --snapshot
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 

.goreleaser-release.yaml

@@ -0,0 +1,88 @@
+version: 2
+
+before:
+  hooks:
+    - go mod download
+
+builds:
+  - id: unix
+    main: ./.github/release-test
+    env:
+      - CGO_ENABLED=0
+    mod_timestamp: '{{ .CommitTimestamp }}'
+    flags:
+      - -trimpath
+    ldflags: &ldflags
+      - '-s -w'
+      - -X github.com/databricks/cli/internal/build.buildProjectName={{ .ProjectName }}
+      - -X github.com/databricks/cli/internal/build.buildVersion={{ .Version }}
+
+      # Git information
+      - -X github.com/databricks/cli/internal/build.buildBranch={{ .Branch }}
+      - -X github.com/databricks/cli/internal/build.buildTag={{ .Tag }}
+      - -X github.com/databricks/cli/internal/build.buildShortCommit={{ .ShortCommit }}
+      - -X github.com/databricks/cli/internal/build.buildFullCommit={{ .FullCommit }}
+      - -X github.com/databricks/cli/internal/build.buildCommitTimestamp={{ .CommitTimestamp }}
+      - -X github.com/databricks/cli/internal/build.buildSummary={{ .Summary }}
+
+      # Version information
+      - -X github.com/databricks/cli/internal/build.buildMajor={{ .Major }}
+      - -X github.com/databricks/cli/internal/build.buildMinor={{ .Minor }}
+      - -X github.com/databricks/cli/internal/build.buildPatch={{ .Patch }}
+      - -X github.com/databricks/cli/internal/build.buildPrerelease={{ .Prerelease }}
+      - -X github.com/databricks/cli/internal/build.buildIsSnapshot={{ .IsSnapshot }}
+      - -X github.com/databricks/cli/internal/build.buildTimestamp={{ .Timestamp }}
+
+    goos:
+      - linux
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+    binary: databricks
+
+  - id: windows
+    main: ./.github/release-test
+    env:
+      - CGO_ENABLED=0
+    mod_timestamp: '{{ .CommitTimestamp }}'
+    flags:
+      - -trimpath
+    ldflags: *ldflags
+
+    goos:
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    binary: databricks
+
+    # Sign Windows binaries using jsign with Azure Key Vault.
+    # When JSIGN_JAR is unset (e.g. snapshot builds), signing is skipped.
+    # https://github.com/ebourg/jsign
+    hooks:
+      post:
+        - bash -c 'test -z "${JSIGN_JAR}" && exit 0; java -jar "${JSIGN_JAR}" --storetype AZUREKEYVAULT --keystore deco-sign --storepass "${AZURE_VAULT_TOKEN}" --alias deco-sign --tsaurl http://timestamp.digicert.com "{{ .Path }}"'
+
+archives:
+  - formats: ["zip", "tar.gz"]
+
+    # Include version in archive only for release builds and not for snapshot builds.
+    # Snapshot archives must have a stable file name such that the artifacts in the nightly
+    # release are automatically overwritten. If the snapshot version is included in the
+    # file name then additional logic to clean up older builds would be needed.
+    name_template: 'databricks_cli_{{ if not .IsSnapshot }}{{ .Version }}_{{ end }}{{ .Os }}_{{ .Arch }}'
+
+checksum:
+  name_template: 'databricks_cli_{{ .Version }}_SHA256SUMS'
+  algorithm: sha256
+
+snapshot:
+  version_template: '{{ incpatch .Version }}-dev+{{ .ShortCommit }}'
+
+changelog:
+  sort: asc
+  filters:
+    exclude:
+      - '^docs:'
+      - '^test:'