Merge pull request #667 from rharkor/rec #126
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - main-release | |
| - rec | |
| - rec-release | |
| workflow_dispatch: | |
| permissions: | |
| contents: read # for checkout | |
| jobs: | |
| # This job is used to sync the main branch to the main:release branch and the rec branch to the rec:release branch | |
| sync: | |
| name: Sync | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write # to be able to push to the main:release and rec:release branches | |
| id-token: write # to enable use of OIDC for npm provenance | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.ref == 'refs/heads/rec' | |
| steps: | |
| - name: Generate token | |
| id: generate_token | |
| uses: tibdex/github-app-token@v2 | |
| with: | |
| app_id: ${{ secrets.MYBOT_APP_ID }} | |
| private_key: ${{ secrets.MYBOT_PRIVATE_KEY }} | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| token: ${{ steps.generate_token.outputs.token }} | |
| - name: Setup Git Config | |
| run: | | |
| git config user.name "GitHub Actions" | |
| git config user.email "[email protected]" | |
| - name: Sync Branch | |
| run: | | |
| SOURCE_BRANCH="${GITHUB_REF_NAME}" | |
| TARGET_BRANCH="${GITHUB_REF_NAME}-release" | |
| # Ensure we're on the source branch | |
| git checkout ${SOURCE_BRANCH} | |
| # Delete the target branch locally | |
| git branch -D ${TARGET_BRANCH} || true | |
| # Create a new local branch based on the current state of the source | |
| git checkout -b ${TARGET_BRANCH} | |
| # Force-push this new branch to the remote, overwriting the target | |
| git push origin ${TARGET_BRANCH} --force | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} | |
| release: | |
| name: Release | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write # to be able to publish a GitHub release | |
| issues: write # to be able to comment on released issues | |
| pull-requests: write # to be able to comment on released pull requests | |
| id-token: write # to enable use of OIDC for npm provenance | |
| if: github.event_name == 'push' && (github.ref == 'refs/heads/main-release' || github.ref == 'refs/heads/rec-release') | |
| steps: | |
| - name: Generate token | |
| id: generate_token | |
| uses: tibdex/github-app-token@v2 | |
| with: | |
| app_id: ${{ secrets.MYBOT_APP_ID }} | |
| private_key: ${{ secrets.MYBOT_PRIVATE_KEY }} | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| token: ${{ steps.generate_token.outputs.token }} | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20.x" | |
| cache: "npm" | |
| - name: Install dependencies | |
| run: npm install | |
| # - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies | |
| # run: npm audit signatures | |
| - name: Release | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: npx semantic-release |