.azure-pipelines/release.yml: add macOS builds

Add macOS release build definitions on Azure Pipelines.

Signed-off-by: Matthew John Cheetham <mjcheetham@outlook.com>

Author: mjcheetham

.azure-pipelines/release.yml

@@ -18,6 +18,7 @@ parameters:
 #
 # 1ES Pipeline Templates do not allow using a matrix strategy so we create
 # a YAML object parameter with and foreach to create jobs for each entry.
+# Each OS has its own matrix object since their build steps differ.
 #
   - name: windows_matrix
     type: object
@@ -29,6 +30,22 @@ parameters:
         image: win-x86_64-ado1es
         os: windows
 
+  - name: macos_matrix
+    type: object
+    default:
+      - id: macos_x64
+        jobName: 'macOS (x64)'
+        runtime: osx-x64
+        pool: 'Azure Pipelines'
+        image: macOS-latest
+        os: macos
+      - id: macos_arm64
+        jobName: 'macOS (ARM64)'
+        runtime: osx-arm64
+        pool: 'Azure Pipelines'
+        image: macOS-latest
+        os: macos
+
 variables:
   - name: 'esrpConnectionName'
     value: '1ESGitClient-ESRP'
@@ -180,3 +197,141 @@ extends:
                 #           "Parameters": {}
                 #         }
                 #       ]
+
+          #
+          # macOS build jobs
+          #
+          - ${{ each dim in parameters.macos_matrix }}:
+            - job: ${{ dim.id }}
+              displayName: ${{ dim.jobName }}
+              pool:
+                name: ${{ dim.pool }}
+                image: ${{ dim.image }}
+                os: ${{ dim.os }}
+              templateContext:
+                outputs:
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/payload'
+                    artifactName: '${{ dim.runtime }}_payload'
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/symbols'
+                    artifactName: '${{ dim.runtime }}_symbols'
+                  - output: pipelineArtifact
+                    targetPath: '$(Build.ArtifactStagingDirectory)/installers'
+                    artifactName: '${{ dim.runtime }}_installers'
+              steps:
+                - checkout: self
+                - task: Bash@3
+                  displayName: 'Get version'
+                  inputs:
+                    targetType: inline
+                    script: |
+                      echo "##vso[task.setvariable variable=VERSION]$(cat ./VERSION | sed -E 's/.[0-9]+$//')"
+                - task: UseDotNet@2
+                  displayName: 'Use .NET 8 SDK'
+                  inputs:
+                    packageType: sdk
+                    version: '8.x'
+                - task: Bash@3
+                  displayName: 'Build payload'
+                  inputs:
+                    targetType: filePath
+                    filePath: './src/osx/Installer.Mac/layout.sh'
+                    arguments: |
+                      --runtime="${{ dim.runtime }}" \
+                      --configuration="Release" \
+                      --output="$(Build.ArtifactStagingDirectory)/payload" \
+                      --symbol-output="$(Build.ArtifactStagingDirectory)/symbols"
+                # - task: EsrpCodeSigning@5
+                #   condition: and(succeeded(), eq('${{ parameters.esrp }}', true))
+                #   displayName: 'Sign payload'
+                #   inputs:
+                #     connectedServiceName: '$(esrpConnectionName)'
+                #     appRegistrationClientId: '$(esrpClientId)'
+                #     appRegistrationTenantId: '$(esrpTenantId)'
+                #     authAkvName: '$(esrpAuthAkvName)'
+                #     authCertName: '$(esrpAuthCertName)'
+                #     authSignCertName: '$(esrpAuthSignCertName)'
+                #     serviceEndpointUrl: '$(esrpEndpointUrl)'
+                #     folderPath: '$(Build.ArtifactStagingDirectory)/payload'
+                #     pattern: '**/*'
+                #     signConfigType: inlineSignParams
+                #     inlineOperation: |
+                #       [
+                #         {
+                #           "KeyCode": "CP-401337-Apple",
+                #           "OperationCode": "MacAppDeveloperSign",
+                #           "ToolName": "sign",
+                #           "ToolVersion": "1.0",
+                #           "Parameters": {}
+                #         }
+                #       ]
+                - task: Bash@3
+                  displayName: 'Build component package'
+                  inputs:
+                    targetType: filePath
+                    filePath: './src/osx/Installer.Mac/pack.sh'
+                    arguments: |
+                      --version="$(VERSION)" \
+                      --payload="$(Build.ArtifactStagingDirectory)/payload" \
+                      --output="$(Build.ArtifactStagingDirectory)/pkg/com.microsoft.gitcredentialmanager.component.pkg"
+                - task: Bash@3
+                  displayName: 'Build installer package'
+                  inputs:
+                    targetType: filePath
+                    filePath: './src/osx/Installer.Mac/dist.sh'
+                    arguments: |
+                      --version="$(VERSION)" \
+                      --runtime="${{ dim.runtime }}" \
+                      --package-path="$(Build.ArtifactStagingDirectory)/pkg" \
+                      --output="$(Build.ArtifactStagingDirectory)/installers/gcm-${{ dim.runtime }}-$(VERSION).pkg"
+                # - task: EsrpCodeSigning@5
+                #   condition: and(succeeded(), eq('${{ parameters.esrp }}', true))
+                #   displayName: 'Sign installer package'
+                #   inputs:
+                #     connectedServiceName: '$(esrpConnectionName)'
+                #     appRegistrationClientId: '$(esrpClientId)'
+                #     appRegistrationTenantId: '$(esrpTenantId)'
+                #     authAkvName: '$(esrpAuthAkvName)'
+                #     authCertName: '$(esrpAuthCertName)'
+                #     authSignCertName: '$(esrpAuthSignCertName)'
+                #     serviceEndpointUrl: '$(esrpEndpointUrl)'
+                #     folderPath: '$(Build.ArtifactStagingDirectory)/installers'
+                #     pattern: '**/*'
+                #     signConfigType: inlineSignParams
+                #     inlineOperation: |
+                #       [
+                #         {
+                #           "KeyCode": "CP-233029-Apple",
+                #           "OperationCode": "MacAppThirdPartySign",
+                #           "ToolName": "sign",
+                #           "ToolVersion": "1.0",
+                #           "Parameters": {}
+                #         }
+                #       ]
+                # - task: EsrpCodeSigning@5
+                #   condition: and(succeeded(), eq('${{ parameters.esrp }}', true))
+                #   displayName: 'Notarize installer package'
+                #   inputs:
+                #     connectedServiceName: '$(esrpConnectionName)'
+                #     appRegistrationClientId: '$(esrpClientId)'
+                #     appRegistrationTenantId: '$(esrpTenantId)'
+                #     authAkvName: '$(esrpAuthAkvName)'
+                #     authCertName: '$(esrpAuthCertName)'
+                #     authSignCertName: '$(esrpAuthSignCertName)'
+                #     serviceEndpointUrl: '$(esrpEndpointUrl)'
+                #     folderPath: '$(Build.ArtifactStagingDirectory)/installers'
+                #     pattern: '**/*'
+                #     signConfigType: inlineSignParams
+                #     inlineOperation: |
+                #       [
+                #         {
+                #           "KeyCode": "CP-401337-Apple",
+                #           "OperationCode": "MacAppNotarize",
+                #           "ToolName": "sign",
+                #           "ToolVersion": "1.0",
+                #           "Parameters": {
+                #             "BundleId": "com.microsoft.gitcredentialmanager"
+                #           }
+                #         }
+                #       ]