publish-packages.yaml

name: Publish
on:
  # NOTE: avoid using the manual execution unless is the only way to fix some issue,
  # rather retry failed jobs in case of flakes. The manual execution can potentially
  # cause the tags to point to a different commit that the one used to publish
  # the packages
  workflow_dispatch:
  push:
    branches:
      - main

jobs:
  publish:
    if: |
      github.event_name == 'workflow_dispatch' ||
        startsWith(github.event.head_commit.message, 'chore(release): bump package versions')

    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v3
      with:
        # don't checkout a detatched HEAD
        ref: ${{ github.head_ref }}

        # this is important so git log has the whole history
        fetch-depth: '0'

    - name: Setup git
      run: |
        git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
        git config --local user.name "github-actions[bot]"

    - name: "Use Node.js 14"
      uses: actions/setup-node@v3
      with:
        node-version: 20.16.0

    - name: Install npm@10.2.4
      run: npm install -g npm@10.2.4

    - name: Install Dependencies
      run: |
        npm run bootstrap-ci
      shell: bash

    - name: "Publish what is not already in NPM"
      env:
        NPM_TOKEN: ${{ secrets.DEVTOOLSBOT_NPM_TOKEN }}
      run: |
        echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" >> .npmrc
        npm config list
        echo "Publishing packages as $(npm whoami)"
        git update-index --assume-unchanged .npmrc
        npm run publish-packages

    - name: "Publish tags"
      run: |
        npx lerna list -a --json | \
          jq -r '.[] | .name + "@" + .version' | \
          xargs -i sh -c "git tag -a {} -m {} || true"
        git push --follow-tags