appstore-connect-jwt-generator-core/.github/workflows/release.yml at main · poad/appstore-connect-jwt-generator-core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
name: Automatic release
on:
  pull_request:
    branches:
      - main
    types:
      - closed

  workflow_dispatch:

jobs:
  release:
    if: |
      (github.event.pull_request.merged == true && contains(github.event.pull_request.labels.*.name, 'Type: Release')) || github.event_name == 'workflow_dispatch'
    permissions:
      contents: write
      id-token: write  # OIDC
      pull-requests: write  # PR comment

    name: check version, add tag and release
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      with:
        persist-credentials: false

    - name: Setup Node
      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
      with:
        node-version: 'lts/*'
        registry-url: 'https://registry.npmjs.org'
        scope       : 'appstore-connect-jwt-generator-core'
        package-manager-cache: false

    - name: Can Publish
      run : npx can-npm-publish --verbose
      working-directory: package

    - name: Get package info
      id: package
      run: |
        VERSION=$(jq -r '.version' package.json)
        PACKAGE_NAME=$(jq -r '.name' package.json)
        echo "version=$VERSION" >> $GITHUB_OUTPUT
        echo "name=$PACKAGE_NAME" >> $GITHUB_OUTPUT

    - name: Install latest npm
      run: |
        echo "Current npm version: $(npm -v)"
        npm install -g npm@latest
        echo "Updated npm version: $(npm -v)"

    - name: Install pnpm
      uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
      with:
        run_install: |
          - recursive: true
            args: [--no-frozen-lockfile]

    - name: Build
      run : pnpm build
      working-directory: package

    - name: Publish
      run : pnpm -r publish --no-git-checks --access public --provenance
      working-directory: package

    - name: Create GitHub Release with tag
      id: create-release
      run: |
        RELEASE_URL=$(gh release create "v$VERSION" \
          --title "v$VERSION" \
          --target "$SHA" \
          --notes "$PR_BODY")
        echo "url=$RELEASE_URL" >> $GITHUB_OUTPUT
      env:
        GH_TOKEN: ${{ github.token }}
        VERSION: ${{ steps.package.outputs.version }}
        SHA: ${{ github.sha }}
        PR_BODY: ${{ github.event.pull_request.body }}

    - name: Comment on PR - Success
      if: |
        always() &&
        github.event_name == 'pull_request' &&
        success()
      run: |
        gh pr comment "$PR_NUMBER" \
          --body "✅ **Release v$VERSION completed successfully!**

        - 📦 npm package: https://www.npmjs.com/package/$PACKAGE_NAME/v/$VERSION
        - 🏷️ GitHub Release: $RELEASE_URL
        - 🔗 Workflow run: $SERVER_URL/$REPOSITORY/actions/runs/$RUN_ID"
      env:
        GH_TOKEN: ${{ github.token }}
        PR_NUMBER: ${{ github.event.pull_request.number }}
        VERSION: ${{ steps.package.outputs.version }}
        PACKAGE_NAME: ${{ steps.package.outputs.name }}
        RELEASE_URL: ${{ steps.create-release.outputs.url }}
        SERVER_URL: ${{ github.server_url }}
        REPOSITORY: ${{ github.repository }}
        RUN_ID: ${{ github.run_id }}

    - name: Comment on PR - Failure
      if: |
        always() &&
        github.event_name == 'pull_request' &&
        failure()
      run: |
        gh pr comment "$PR_NUMBER" \
          --body "❌ **Release v$VERSION failed**

        Please check the workflow logs for details.
        🔗 Workflow run: $SERVER_URL/$REPOSITORY/actions/runs/$RUN_ID"
      env:
        GH_TOKEN: ${{ github.token }}
        PR_NUMBER: ${{ github.event.pull_request.number }}
        VERSION: ${{ steps.package.outputs.version }}
        SERVER_URL: ${{ github.server_url }}
        REPOSITORY: ${{ github.repository }}
        RUN_ID: ${{ github.run_id }}