ts-dev-tools/.github/workflows/release.yml at main · escemi-tech/ts-dev-tools · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
name: 🚀 Release

on:
  workflow_dispatch:
  schedule:
    - cron: "0 0 1 * *"

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions: {}

jobs:
  ci:
    name: Continuous Integration
    uses: ./.github/workflows/__shared-ci.yml
    permissions:
      contents: read
      id-token: write
      packages: read
      pull-requests: write
      security-events: write

  npm-packages:
    name: 📦 Publish NPM packages
    needs: ci
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0
          token: ${{ secrets.GH_PRIVATE_ACCESS_TOKEN }}

      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@6b74a8f070140f5c120f78026d58e4c00d1b1e37 # 0.24.2

      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          artifact-ids: ${{ needs.ci.outputs.build-artifact-id }}
          path: /

      - env:
          NPM_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
          GH_TOKEN: ${{ secrets.GH_PRIVATE_ACCESS_TOKEN }}
        run: |
          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" > .npmrc

          git config --local user.email "${{ github.actor }}@users.noreply.github.com"
          git config --local user.name "${{ github.actor }}"

          npx lerna publish --force-publish --conventional-commits --create-release github --yes

  documentation:
    if: github.ref_name == github.event.repository.default_branch
    name: 📚 Publish documentation
    needs: ci
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pages: write
      id-token: write
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.url }}
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - id: prepare-deploy
        uses: hoverkraft-tech/ci-github-publish/actions/deploy/jekyll@84d583ba7b357f9476707f54cf5419d630ae0145 # 0.26.2
        with:
          pages: |
            packages/*/README.md

      - id: deployment
        uses: hoverkraft-tech/ci-github-publish/actions/deploy/github-pages@84d583ba7b357f9476707f54cf5419d630ae0145 # 0.26.2
        with:
          build-path: ${{ steps.prepare-deploy.outputs.build-path }}