ci: download mutagen binary into resources

Author: ethanndickson

.github/workflows/release.yml

@@ -7,6 +7,13 @@ on:
   release:
     types: [published]
 
+  workflow_dispatch:
+    inputs:
+      dryrun:
+        description: 'Run in dry-run mode (upload as artifact instead of release asset)'
+        required: true
+        type: boolean
+        default: false
 permissions: {}
 
 # Cancel in-progress runs for when multiple PRs get merged
@@ -23,6 +30,8 @@ jobs:
     permissions:
       # To upload assets to the release
       contents: write
+      # Necessary for GCP authentication (https://github.com/google-github-actions/setup-gcloud#usage)
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -38,6 +47,22 @@ jobs:
 
       - name: Setup Nix
         uses: ./.github/actions/nix-devshell
+      - name: Authenticate to Google Cloud
+        id: gcloud_auth
+        uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
+        with:
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_ID_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
+          token_format: "access_token"
+
+      - name: Setup GCloud SDK
+        uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a # v2.1.4
+
+      - name: Insert Mutagen resources
+        run: |
+          gsutil cp gs://coder-desktop/mutagen/v0.18.1/mutagen-agents.tar.gz "Coder Desktop/Resources/mutagen-agents.tar.gz"
+          gsutil cp gs://coder-desktop/mutagen/v0.18.1/mutagen-darwin-amd64 "Coder Desktop/Resources/mutagen-darwin-amd64"
+          gsutil cp gs://coder-desktop/mutagen/v0.18.1/mutagen-linux-amd64 "Coder Desktop/Resources/mutagen-linux-amd64"
 
       - name: Build
         env:
@@ -51,7 +76,18 @@ jobs:
           EXT_PROF: ${{ secrets.CODER_DESKTOP_EXTENSION_PROVISIONPROFILE_B64 }}
         run: make release
 
+      # Upload as artifact in dry-run mode
+      - name: Upload Build Artifact
+        if: ${{ inputs.dryrun }}
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+        with:
+          name: coder-desktop-build
+          path: ${{ github.workspace }}/out
+          retention-days: 7
+
+      # Upload to release in non-dry-run mode
       - name: Upload Release Assets
+        if: ${{ !inputs.dryrun }}
         run: gh release upload "$RELEASE_TAG" "$out"/* --clobber
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -60,7 +96,7 @@ jobs:
   update-cask:
     name: Update homebrew-coder cask
     runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
-    if: ${{ github.repository_owner == 'coder' }}
+    if: ${{ github.repository_owner == 'coder' && !inputs.dryrun }}
     needs: build
     steps:
       - name: Checkout