release.yml

name: Release

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      tag:
        description: Existing git tag to publish, for example v0.1.0-beta.1
        required: true
        type: string

permissions:
  contents: write
  packages: write

concurrency:
  group: release-${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
  cancel-in-progress: false

jobs:
  release:
    runs-on: ubuntu-latest
    env:
      RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
      REGISTRY_IMAGE: ghcr.io/contentrain/studio

    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Resolve release tag
        id: release_meta
        shell: bash
        run: |
          set -euo pipefail

          TAG="${RELEASE_TAG}"

          if [[ ! "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]]; then
            echo "Invalid release tag: $TAG" >&2
            exit 1
          fi

          git fetch --force --tags origin
          git rev-parse "${TAG}^{commit}" >/dev/null
          git checkout --detach "$TAG"

          VERSION="${TAG#v}"
          PACKAGE_VERSION="$(node -e "console.log(JSON.parse(require('fs').readFileSync('package.json', 'utf8')).version || '')")"

          if [[ "$PACKAGE_VERSION" != "$VERSION" ]]; then
            echo "package.json version ($PACKAGE_VERSION) does not match tag ($VERSION)" >&2
            exit 1
          fi

          FULL_SHA="$(git rev-parse HEAD)"
          SHORT_SHA="$(git rev-parse --short=7 HEAD)"
          PRERELEASE=false
          if [[ "$VERSION" == *-* ]]; then
            PRERELEASE=true
          fi

          TAGS=(
            "${REGISTRY_IMAGE}:${TAG}"
            "${REGISTRY_IMAGE}:sha-${SHORT_SHA}"
          )

          if [[ "$PRERELEASE" == false ]]; then
            IFS='.' read -r MAJOR MINOR PATCH <<< "$VERSION"
            TAGS+=(
              "${REGISTRY_IMAGE}:${MAJOR}.${MINOR}"
              "${REGISTRY_IMAGE}:${MAJOR}"
              "${REGISTRY_IMAGE}:latest"
            )
          fi

          {
            echo "version=$VERSION"
            echo "full_sha=$FULL_SHA"
            echo "short_sha=$SHORT_SHA"
            echo "prerelease=$PRERELEASE"
            echo "tags<<EOF"
            printf '%s\n' "${TAGS[@]}"
            echo "EOF"
          } >> "$GITHUB_OUTPUT"

      - uses: pnpm/action-setup@v6
        with:
          version: 10.26.2

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Generate Contentrain client
        run: npx contentrain generate

      - name: Lint
        run: pnpm lint

      - name: Typecheck
        run: pnpm typecheck

      - name: Start local Supabase DB
        run: pnpm dlx supabase start --yes --workdir . --exclude gotrue,realtime,storage-api,imgproxy,kong,mailpit,postgrest,postgres-meta,studio,edge-runtime,logflare,vector,supavisor

      - name: Test
        run: pnpm test:ci

      - name: Test RLS
        run: pnpm test:rls

      - name: Install Playwright browsers
        run: pnpm exec playwright-core install --with-deps chromium

      - name: Test E2E
        run: pnpm test:e2e

      - name: Build
        run: pnpm build

      - uses: docker/setup-buildx-action@v4

      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push image
        uses: docker/build-push-action@v7
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: ${{ steps.release_meta.outputs.tags }}
          labels: |
            org.opencontainers.image.source=https://github.com/${{ github.repository }}
            org.opencontainers.image.title=Contentrain Studio
            org.opencontainers.image.version=${{ steps.release_meta.outputs.version }}
            org.opencontainers.image.revision=${{ steps.release_meta.outputs.full_sha }}

      - name: Extract changelog for this version
        id: changelog
        shell: bash
        run: |
          VERSION="${{ steps.release_meta.outputs.version }}"
          # Extract the section between this version header and the next version header
          BODY=$(awk "/^## v${VERSION//./\\.}/{found=1; next} /^## v[0-9]/{if(found) exit} found" CHANGELOG.md)
          if [ -z "$BODY" ]; then
            BODY="See [full changelog](https://github.com/${{ github.repository }}/compare/...v${VERSION})"
          fi
          # Write to file to avoid quoting issues
          echo "$BODY" > /tmp/release-body.md

      - name: Create GitHub release
        uses: softprops/action-gh-release@v3
        with:
          tag_name: ${{ env.RELEASE_TAG }}
          body_path: /tmp/release-body.md
          prerelease: ${{ steps.release_meta.outputs.prerelease == 'true' }}