release.yml

name: Release

on:
  release:
    types: [published]
  workflow_dispatch:

permissions:
  contents: read
  id-token: write

jobs:
  verify:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Run tests
        run: bundle exec rake test

      - name: Ensure version is bumped
        run: |
          CURRENT_VERSION="$(ruby -Ilib -e "require 'cloudstack_client/version'; puts CloudstackClient::VERSION")"
          LATEST_JSON="$(curl -fsSL https://rubygems.org/api/v1/versions/cloudstack_client/latest.json || true)"
          if [ -n "$LATEST_JSON" ]; then
            LATEST_VERSION="$(printf '%s' "$LATEST_JSON" | ruby -rjson -e "puts JSON.parse(STDIN.read)['version']")"
            ruby -e "require 'rubygems/version'; current = Gem::Version.new('$CURRENT_VERSION'); latest = Gem::Version.new('$LATEST_VERSION'); abort(\"Version must be bumped before building (current=#{current}, latest=#{latest})\") unless current > latest"
          fi

      - name: Build gem
        run: bundle exec rake build

  publish:
    runs-on: ubuntu-latest
    needs: verify
    environment: rubygems

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Check if RUBYGEMS_AUTH_TOKEN is set
        run: |
          if [ -z "${{ secrets.RUBYGEMS_AUTH_TOKEN }}" ]; then
            echo 'RUBYGEMS_AUTH_TOKEN not set!'
            exit 1
          else
            echo 'RUBYGEMS_AUTH_TOKEN is available.'
          fi

      - name: Publish gem to RubyGems
        uses: rubygems/release-gem@v2
        with:
          api-key: ${{ secrets.RUBYGEMS_AUTH_TOKEN }}