PP-12343: Add post merge package and release, and ensure package works on PRs

.github/workflows/post-merge.yml

@@ -0,0 +1,87 @@
+name: Post Merge
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    uses: ./.github/workflows/run-tests.yml
+
+  release-package:
+    needs: tests
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
+    name: Check for, and perform release
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        with:
+          fetch-depth: '0'
+      - name: Load pkl version
+        id: load-pkl-version
+        run: |
+          PKL_VERSION=$(cat .pkl-version)
+          echo "PKL_VERSION=${PKL_VERSION}" | tee -a "$GITHUB_OUTPUT"
+      - name: Install pkl
+        env:
+          PKL_VERSION: "${{ steps.load-pkl-version.outputs.PKL_VERSION }}"
+        run: |
+          curl -L -o pkl https://github.com/apple/pkl/releases/download/${PKL_VERSION}/pkl-linux-amd64
+          chmod u+x pkl
+          ./pkl --version
+      - name: Get pkl module version
+        id: load-module-version
+        run: |
+          set -o pipefail
+
+          MODULE_VERSION=$(./pkl eval -f json src/PklProject | jq -r .package.version)
+          if [ -z "${MODULE_VERSION:-}" ]; then
+            echo "Couldn't read module version!"
+            exit 1
+          fi
+
+          echo "MODULE_VERSION=${MODULE_VERSION}" | tee -a "$GITHUB_OUTPUT"
+      - name: Check for existing release
+        id: check-for-existing-release
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea
+        env:
+          MODULE_VERSION: "${{ steps.load-module-version.outputs.MODULE_VERSION }}"
+        with:
+          script: |
+            const module_version = process.env.MODULE_VERSION;
+            console.log(`Checking for a release of version ${module_version}`)
+
+            try {
+              const release = await github.rest.repos.getReleaseByTag({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                tag: module_version,
+              })
+              console.log(`Release found for version ${module_version}, no need to do a new release`)
+              core.setOutput('RELEASE_EXISTS', 'true')
+            } catch (error) {
+              if (error.status === 404) {
+                console.log("No release found, release required")
+                core.setOutput('RELEASE_EXISTS', 'false')
+                return
+              }
+              throw error
+            }
+      - if: steps.check-for-existing-release.outputs.RELEASE_EXISTS == 'false'
+        name: Build new version
+        run: |
+          ./pkl project package src/ --output-path build/
+      - if: steps.check-for-existing-release.outputs.RELEASE_EXISTS == 'false'
+        name: Release new version
+        env:
+          MODULE_VERSION: "${{ steps.load-module-version.outputs.MODULE_VERSION }}"
+        run: |
+          echo "Creating release ${MODULE_VERSION}"
+          gh release create --create-notes --latest "${MODULE_VERSION}" build/*

.github/workflows/run-tests.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Git checkout
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Detect secrets
         uses: alphagov/pay-ci/actions/detect-secrets@master
 
@@ -21,12 +21,21 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        with:
+          fetch-depth: '0'
+      - name: Load pkl version
+        id: load-pkl-version
+        run: |
+          PKL_VERSION=$(cat .pkl-version)
+          echo "PKL_VERSION=${PKL_VERSION}" | tee -a "$GITHUB_OUTPUT"
       - name: Install pkl
+        env:
+          PKL_VERSION: "${{ steps.load-pkl-version.outputs.PKL_VERSION }}"
         run: |
-
-          curl -L -o pkl https://github.com/apple/pkl/releases/download/0.25.2/pkl-linux-amd64
+          curl -L -o pkl https://github.com/apple/pkl/releases/download/${PKL_VERSION}/pkl-linux-amd64
           chmod u+x pkl
+          ./pkl --version
       - name: Validate Task Config
         run: |
           set -o pipefail
@@ -35,3 +44,6 @@ jobs:
         run: |
           set -o pipefail
           ./pkl eval tests/pipeline.pkl | diff tests/expected/pipeline.yml -
+      - name: Validate package can build
+        run: |
+          ./pkl project package src/ --output-path build/

.gitignore

@@ -0,0 +1 @@
+build/

.pkl-version

@@ -0,0 +1 @@
+0.25.2

README.md

@@ -1,6 +1,13 @@
 # pkl-concourse-pipeline
 A pkl module defining the schema of concourse pipelines
 
+## Releasing new versions
+
+1. Update the version number in [src/PklProject](src/PklProject) in a PR
+2. Get approval and Merge the PR
+
+The post-merge workflow will detect there needs to be a new release and will automatically create the new release in GitHub.
+
 ## Licence
 
 [MIT License](LICENSE)

src/PklProject

@@ -4,8 +4,8 @@ package {
   name = "concourse_pipeline"
   version = "0.0.1"
   license = "MIT"
+  baseUri = "package://pkg.pkl-lang.org/github.com/alphagov/pkl-concourse-pipeline"
   sourceCode = "https://github.com/alphagov/pkl-concourse-pipeline"
-  baseUri = "package://pkl.pkl-lang.org/github.com/alphagov/pkl-concourse-pipeline"
   sourceCodeUrlScheme = "\(sourceCode)/blob/\(name)@\(version)%{path}#L%{line}-L%{endLine}"
   packageZipUrl = "\(sourceCode)/releases/download/\(name)@\(version)/\(name)@\(version).zip"
   description = """