feat: push cli binary to S3 blob storage

.github/workflows/release.yml

@@ -4,6 +4,10 @@ on:
     types:
       - published
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   release:
     runs-on: depot-ubuntu-latest-16
@@ -34,14 +38,19 @@ jobs:
         run: pnpm install --frozen-lockfile --ignore-scripts
         working-directory: npm
 
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::375021575472:role/github-actions
+          aws-region: us-east-1
+
       - name: Compute tag name
         id: tag-name
-        run: echo "::set-output name=tag-name::${GITHUB_REF#refs/tags/}"
+        run: echo "tag-name=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
 
       - uses: goreleaser/goreleaser-action@v5
         with:
           version: 1.19.0
-          args: release
+          args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.BOT_PUBLIC_GITHUB_TOKEN }}
           GORELEASER_CURRENT_TAG: ${{ steps.tag-name.outputs.tag-name }}

.goreleaser.yml

@@ -46,6 +46,12 @@ archives:
 changelog:
   skip: true
 
+blobs:
+  - provider: s3
+    region: us-east-1
+    bucket: depot-binaries
+    folder: "cli/{{ .Tag }}"
+
 brews:
   - repository:
       owner: depot