feat: release binaries (#843)

Author: Proximyst

.github/workflows/docker.yaml renamed to .github/workflows/build.yaml

@@ -1,11 +1,11 @@
-name: Docker
+name: Build
 
 on:
   push:
     branches:
       - master
     tags:
-      - 'v*'
+      - "v*"
   pull_request:
 
 permissions: {}
@@ -15,6 +15,43 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  go-build:
+    strategy:
+      matrix:
+        include:
+          - GOOS: linux
+            GOARCH: amd64
+          - GOOS: linux
+            GOARCH: arm64
+          - GOOS: windows
+            GOARCH: amd64
+            SUFFIX: .exe
+          - GOOS: windows
+            GOARCH: arm64
+            SUFFIX: .exe
+      fail-fast: false
+
+    name: Go build (for ${{ matrix.GOOS }}/${{ matrix.GOARCH }})
+    runs-on: ubuntu-latest
+    env:
+      GOOS: ${{ matrix.GOOS }}
+      GOARCH: ${{ matrix.GOARCH }}
+      SUFFIX: ${{ matrix.SUFFIX || '' }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+          cache: false
+      - name: go build
+        run: go build -o grafana-image-renderer-"$GOOS"-"$GOARCH""$SUFFIX" -buildvcs -ldflags '-s -w' .
+      - uses: actions/upload-artifact@v4
+        with:
+          name: grafana-image-renderer-${{ matrix.GOOS }}-${{ matrix.GOARCH }}${{ matrix.SUFFIX || '' }}
+          path: grafana-image-renderer-${{ matrix.GOOS }}-${{ matrix.GOARCH }}${{ matrix.SUFFIX || '' }}
+
   tag:
     name: Create image tag
     runs-on: ubuntu-latest
@@ -176,11 +213,32 @@ jobs:
             > This is a development image and should not be used in production.
             > It will be automatically removed after 2 weeks.
 
-# Workflow: https://argo-workflows.grafana.net/workflow-templates/render-service-cd/auto-deploy-dev
+  release:
+    name: Create GitHub Release
+    if: github.event_name == 'push' && github.ref_type == 'tag'
+    needs: [tag, build, manifest, go-build]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # to create the release
+      packages: read # to read the package information
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          merge-multiple: true
+          path: bins/
+          pattern: grafana-image-renderer-*
+      - uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2
+        with:
+          files: bins/*
+          fail_on_unmatched_files: true
+          make_latest: "true"
+          generate_release_notes: true
+
+  # Workflow: https://argo-workflows.grafana.net/workflow-templates/render-service-cd/auto-deploy-dev
   cd-auto-deploy-dev:
     name: Deploy to dev
     if: startsWith(github.ref, 'refs/tags/v')
-    needs: [tag, build]
+    needs: [tag, manifest]
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -199,11 +257,11 @@ jobs:
         run: |
           echo "URI: ${{ steps.trigger-argowfs-deployment.outputs.uri }}"
 
-# Workflow: https://argo-workflows.grafana.net/workflow-templates/render-service-cd/deploy-prod
+  # Workflow: https://argo-workflows.grafana.net/workflow-templates/render-service-cd/deploy-prod
   cd-deploy-prod:
     name: Deploy to prod
     if: startsWith(github.ref, 'refs/tags/v')
-    needs: [tag, build]
+    needs: [tag, manifest]
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/docker-scan.yaml

@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: false
@@ -69,7 +69,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: false

.github/workflows/docker-test.yaml

@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
           cache: false

.github/workflows/test.yaml

@@ -22,7 +22,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
       - run: go test -buildvcs ./...
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
       - run: go tool goimports -l .
@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
       - run: go mod tidy -diff
@@ -64,7 +64,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
       - uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8

CHANGELOG.md

@@ -1,4 +1,9 @@
-## 5.0.0 (2025-X-Y)
+## 5.0.1+
+
+Please use the GitHub Releases page for future changelogs.
+They are automatically generated, meaning there is less work for us to do, and thus less error-prone.
+
+## 5.0.0 (2025-10-31)
 
 - Rewrite: Migrate to Go
   - This also means the entire Node.js service and plugin are both gone.

cmd/sandbox/cmd.go

@@ -1,3 +1,5 @@
+//go:build linux
+
 package sandbox
 
 import (

cmd/sandbox/cmd_nonlinux.go

@@ -0,0 +1,20 @@
+//go:build !linux
+
+package sandbox
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/urfave/cli/v3"
+)
+
+func NewCmd() *cli.Command {
+	return &cli.Command{
+		Name:            "_internal_sandbox",
+		SkipFlagParsing: true,
+		Action: func(ctx context.Context, c *cli.Command) error {
+			return fmt.Errorf("unsupported on your system")
+		},
+	}
+}

docs/troubleshooting.md

@@ -136,3 +136,15 @@ If you are a Grafana Enterprise customer, consider contacting Grafana Support.
 ## My Grafana isn't in Docker
 
 You can use [host networking](https://docs.docker.com/engine/network/tutorials/host/) instead.
+
+## I use Windows and do not want Docker
+
+You can download the Windows binaries from the GitHub Release.
+As an example, this is how you run it with Brave on an ARM64 Windows host:
+
+```powershell
+PS > .\grafana-image-renderer-windows-arm64.exe server --browser.path "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe"
+```
+
+The browser must be installed separately.
+The browser must be a Chromium-based browser.

pkg/sandbox/sandbox.go

@@ -1,3 +1,5 @@
+//go:build linux
+
 package sandbox
 
 import (

pkg/sandbox/sandbox_nonlinux.go

@@ -0,0 +1,12 @@
+//go:build !linux
+
+package sandbox
+
+import "context"
+
+// Supported attempts to determine if the current file-system will permit using our sandboxing.
+//
+// Upon any error, it returns false.
+func Supported(_ context.Context) bool {
+	return false
+}