release.yml

name: Release

on:
  push:
    branches:
      - main
  workflow_dispatch:

concurrency: ${{ github.workflow }}-${{ github.ref }}

jobs:
  changelog:
    name: Changelog
    runs-on: ubuntu-latest
    outputs:
      hasChangesets: ${{ steps.changesets.outputs.hasChangesets }}
      releaseExists: ${{ steps.published.outputs.exists }}
    permissions:
      contents: write
      pull-requests: write
    steps:
      - name: Checkout repo
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: true

      - name: Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          cache: npm
          cache-dependency-path: package-lock.json
          node-version-file: .nvmrc

      - name: Install dependencies
        run: npm ci --verbose

      - name: Update release PR
        id: changesets
        uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0
        with:
          commit: "chore: release"
          title: "chore: release"
          version: npm run version
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Check if publish is needed
        id: published
        if: steps.changesets.outputs.hasChangesets == 'false'
        run: |
          VERSION=$(node -p "require('./package.json').version")
          if gh release view "v${VERSION}" &>/dev/null; then
            echo "exists=true" >> "$GITHUB_OUTPUT"
          else
            echo "exists=false" >> "$GITHUB_OUTPUT"
          fi
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  publish:
    name: Publish
    needs: changelog
    if: needs.changelog.outputs.hasChangesets == 'false' && needs.changelog.outputs.releaseExists == 'false'
    runs-on: ubuntu-latest
    environment: publish
    permissions:
      contents: write
    steps:
      - name: Gather credentials
        id: credentials
        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
        with:
          client-id: ${{ secrets.GH_APP_CLIENT_ID }}
          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
          owner: ${{ github.repository_owner }}
          repositories: ${{ github.event.repository.name }}
          permission-contents: write

      - name: Checkout repo
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: true
          token: ${{ steps.credentials.outputs.token }}

      - name: Setup Node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          cache: npm
          cache-dependency-path: package-lock.json
          node-version-file: .nvmrc

      - name: Install dependencies
        run: npm ci --verbose

      - name: Build a production release
        run: npm run build

      - name: Gather version
        id: version
        run: |
          VERSION="v$(node -p 'require("./package.json").version')"
          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
          echo "major=$(echo "$VERSION" | cut -d. -f1)" >> "$GITHUB_OUTPUT"
          echo "minor=$(echo "$VERSION" | cut -d. -f1-2)" >> "$GITHUB_OUTPUT"
          echo "$VERSION"

      - name: Check if release exists
        id: check
        run: |
          if gh release view "$VERSION" &>/dev/null; then
            echo "exists=true" >> "$GITHUB_OUTPUT"
          else
            echo "exists=false" >> "$GITHUB_OUTPUT"
          fi
        env:
          VERSION: ${{ steps.version.outputs.version }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Create release artifacts
        if: steps.check.outputs.exists == 'false'
        id: release
        run: |
          awk '/^## /{if(n++)exit}n' CHANGELOG.md | tail -n +3 > RELEASE.md
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git checkout -b "release/$VERSION"
          git rm -rf .
          git checkout HEAD -- LICENSE
          git checkout HEAD -- README.md
          git checkout HEAD -- action.yml
          git checkout HEAD -- cli/
          git add --force dist/
          git commit -m "chore: release"
          git push origin "release/$VERSION"
          SHA=$(git rev-parse HEAD)
          git tag -f "$MAJOR" "$SHA"
          git tag -f "$MINOR" "$SHA"
          git push -f origin "$MAJOR" "$MINOR"
          echo "sha=$SHA" >> "$GITHUB_OUTPUT"
        env:
          VERSION: ${{ steps.version.outputs.version }}
          MAJOR: ${{ steps.version.outputs.major }}
          MINOR: ${{ steps.version.outputs.minor }}

      - name: Create GitHub release
        if: steps.check.outputs.exists == 'false'
        run: gh release create "$VERSION" --target "$SHA" --title "Slack GitHub Action $VERSION" --notes-file RELEASE.md
        env:
          VERSION: ${{ steps.version.outputs.version }}
          SHA: ${{ steps.release.outputs.sha }}
          GH_TOKEN: ${{ steps.credentials.outputs.token }}

      - name: Notify Slack
        if: steps.check.outputs.exists == 'false'
        uses: slackapi/slack-github-action@03ea5433c137af7c0495bc0cad1af10403fc800c # v3.0.2
        with:
          webhook: ${{ secrets.SLACK_RELEASE_ANNOUNCEMENTS_WEBHOOK_URL }}
          webhook-type: webhook-trigger
          payload: |
            action_url: "https://github.com/${{ github.repository }}/releases/tag/${{ steps.version.outputs.version }}"
            message: "Slack GitHub Action ${{ steps.version.outputs.version }}"
            repository: "${{ github.repository }}"