[INFRA] Automate releases (build part)

[tbouffard]

The current way of cutting release is very manual (at least in 0.1.1, see README)
Setup a GitHub Workflow, Travis CI build, .... to automate this as much as possible and reduce errors.

Goal

This issue aims to cover the 1st automation step:

• bump the version in the npm package.json file + tag the related commit
• push changes to master
• push the newly created git tag

A note about GitHub Actions/Workflows

[UPDATE 2020-07-07] it is now possible to manually triggered a GH Workflow via the new workflow_dispatch event type, see https://github.blog/changelog/2020-07-06-github-actions-manual-triggers-with-workflow_dispatch/

Triggering manual jobs/builds is currently not available

• https://github.community/t5/GitHub-Actions/GitHub-Actions-Manual-Trigger-Approvals/m-p/31504
• https://github.community/t5/GitHub-Actions/Manual-Jobs/m-p/32079

The workaround suggested in the community forum is to use a repository dispatch event with a custom event type

• https://developer.github.com/v3/repos/#create-a-repository-dispatch-event
• https://help.github.com/en/actions/reference/events-that-trigger-workflows#external-events-repository_dispatch
• http://www.btellez.com/posts/triggering-github-actions-with-webhooks.html
• https://github.com/semantic-release/semantic-release/blob/a62bc7cd859ee6be1f2af58ad84a08ccbdabcb1b/docs/recipes/github-actions.md#trigger-semantic-release-on-demand

Alternatives to repository dispatch event

We could trigger the job on

• GH release creation using the related GH event

GitHub Token

In addition, we may have to use a custom github token if the default action one has not enough permissions, see https://help.github.com/en/actions/configuring-and-managing-workflows/authenticating-with-the-github_token#permissions-for-the-github_token

Master Branch Protection

As the master branch currently does not accept push without creating Pull Request, we may

• disable 'include administrator' rule and re-enable it afterwards. This can be performed using https://github.com/benjefferies/branch-protection-bot
• use process-analytics-bot and grant him administrator privilege to ensure the branch-protection-bot action work

Release resources

• https://github.com/release-drafter/release-drafter/blob/master/package.json
• https://github.com/release-drafter/release-drafter#releasing
• https://github.com/peter-evans/slash-command-dispatch

Alternatives

https://semantic-release.gitbook.io/semantic-release/