release.yml

name: release

on:
  push:
    branches:
      - master

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}

jobs:
  release-test:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4.2.2

      - name: Setup Node.js
        uses: actions/setup-node@v4.2.0
        with:
          node-version: 20
          cache: "npm"

      - name: Install dependencies
        run: npm ci
        env:
          SKIP_BUILD: true

      - name: Lint
        run: npm run lint -- --no-fix

  release-semantic:
    needs: release-test

    runs-on: ubuntu-latest

    outputs:
      published: ${{ steps.release.outputs.published }}
      release-version: ${{ steps.release.outputs.release-version }}
      release-version-major: ${{ steps.release.outputs.release-version-major }}
      release-version-minor: ${{ steps.release.outputs.release-version-minor }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4.2.2

      - name: Setup Node.js
        uses: actions/setup-node@v4.2.0
        with:
          node-version: 20
          cache: "npm"

      - name: Install dependencies
        run: npm ci
        env:
          SKIP_BUILD: true

      - name: Semantic release
        id: release
        uses: ahmadnassri/action-semantic-release@v2.2.8
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          npm_config_unsafe_perm: true

  release-alias:
    needs: release-semantic
    if: needs.release-semantic.outputs.published == 'true'
    runs-on: ubuntu-latest
    strategy:
      matrix:
        tag:
          - v${{ needs.release-semantic.outputs.release-version-major }}
          - v${{ needs.release-semantic.outputs.release-version-major }}.${{ needs.release-semantic.outputs.release-version-minor }}

    steps:
      - name: Recreate tag
        uses: actions/github-script@v7.0.1
        with:
          script: |
            const tag = 'tags/${{ matrix.tag }}';
            const repo = {
              owner: context.repo.owner,
              repo: context.repo.repo
            };
            await github.rest.git.deleteRef({ ...repo, ref: tag }).catch(() => {});
            await github.rest.git.createRef({ ...repo, ref: `refs/${tag}` , sha: process.env.GITHUB_SHA });

  release-docker:
    needs: release-semantic
    if: needs.release-semantic.outputs.published == 'true'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4.2.2

      - name: Repo metadata
        id: repo
        uses: actions/github-script@v7.0.1
        with:
          script: |
            const repo = await github.rest.repos.get(context.repo)
            return repo.data

      - name: Prepare
        id: prep
        run: |
          echo ::set-output name=docker-image::${{ github.event.repository.full_name }}
          echo ::set-output name=created::$(date -u +'%Y-%m-%dT%H:%M:%SZ')

      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3.9.0
        with:
          version: latest

      - name: Login to DockerHub
        uses: docker/login-action@v3.3.0
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Build and push
        id: docker-build
        uses: docker/build-push-action@v6.13.0
        with:
          push: true
          builder: ${{ steps.buildx.outputs.name }}
          context: .
          tags: |
            ${{ steps.prep.outputs.docker-image }}:latest
            ${{ steps.prep.outputs.docker-image }}:${{ needs.release-semantic.outputs.release-version }}
            ${{ steps.prep.outputs.docker-image }}:${{ needs.release-semantic.outputs.release-version-major }}.${{ needs.release-semantic.outputs.release-version-minor }}
            ${{ steps.prep.outputs.docker-image }}:${{ needs.release-semantic.outputs.release-version-major }}
          labels: |
            org.opencontainers.image.title=${{ fromJson(steps.repo.outputs.result).name }}
            org.opencontainers.image.description=${{ fromJson(steps.repo.outputs.result).description }}
            org.opencontainers.image.url=${{ fromJson(steps.repo.outputs.result).html_url }}
            org.opencontainers.image.source=${{ fromJson(steps.repo.outputs.result).clone_url }}
            org.opencontainers.image.version=${{ needs.release-semantic.outputs.release-version }}
            org.opencontainers.image.created=${{ steps.prep.outputs.created }}
            org.opencontainers.image.revision=${{ github.sha }}
            org.opencontainers.image.licenses=${{ fromJson(steps.repo.outputs.result).license.spdx_id }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Update repo description
        uses: peter-evans/dockerhub-description@v4.0.0
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
          repository: ${{ github.event.repository.full_name }}