release.yml

name: Release

on:
  push:
    branches: [master, beta]
  workflow_dispatch:

permissions: {}

concurrency:
  group: release-${{ github.ref_name }}
  cancel-in-progress: false

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  wait-for-ci:
    name: Wait for CI
    if: ${{ github.event_name == 'push' }}
    runs-on: ubuntu-latest
    permissions:
      actions: read
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          persist-credentials: false

      - name: Wait for CI workflow to succeed
        env:
          BRANCH: ${{ github.ref_name }}
          COMMIT_SHA: ${{ github.sha }}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: bash .github/scripts/wait-for-workflow.sh ci.yml "$BRANCH" "$COMMIT_SHA"

  release-please:
    name: Release Please
    needs: wait-for-ci
    if: >-
      always()
      && (github.ref_name == 'master' || github.ref_name == 'beta')
      && (github.event_name != 'push' || needs.wait-for-ci.result == 'success')
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      issues: write
    outputs:
      release_created: ${{ steps.release.outputs.release_created }}
      tag_name: ${{ steps.release.outputs.tag_name }}
      pr_head_sha: ${{ steps.pr-sha.outputs.sha }}
    steps:
      - name: Release Please
        id: release
        uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          target-branch: ${{ github.ref_name }}
          config-file: ${{ github.ref_name == 'beta' && 'release-please-config-beta.json' || 'release-please-config.json' }}
          manifest-file: ${{ github.ref_name == 'beta' && '.release-please-manifest-beta.json' || '.release-please-manifest.json' }}

      - name: Update release title with date
        if: ${{ steps.release.outputs.release_created }}
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAG: ${{ steps.release.outputs.tag_name }}
          REPO: ${{ github.repository }}
        run: |
          DATE=$(date -u +"%Y/%m/%d")
          gh release edit "$TAG" --repo "$REPO" --title "$TAG ($DATE)"

      - name: Get PR head SHA
        id: pr-sha
        if: ${{ steps.release.outputs.release_created != 'true' }}
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          REPO: ${{ github.repository }}
          BRANCH: ${{ github.ref_name }}
        run: |
          SHA=$(gh pr list --repo "$REPO" --head "release-please--branches--${BRANCH}--components--solapi" --state open --json headRefOid --jq '.[0].headRefOid // empty')
          echo "sha=${SHA:-}" >> "$GITHUB_OUTPUT"

  test-release-pr:
    name: Test (Release PR)
    needs: release-please
    if: >-
      needs.release-please.result == 'success'
      && needs.release-please.outputs.release_created != 'true'
      && needs.release-please.outputs.pr_head_sha != ''
    runs-on: ubuntu-latest
    permissions:
      contents: read
      statuses: write
    steps:
      - name: Set pending status
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=pending -f context="Test" -f description="Running tests..." \
          || echo "::warning::Failed to set pending status on $SHA"

      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          ref: ${{ needs.release-please.outputs.pr_head_sha }}
          persist-credentials: false

      - name: Setup pnpm
        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
        with:
          run_install: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 18

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Test (unit only)
        run: pnpm test:ci

      - name: Build
        run: pnpm tsup

      - name: Report success
        if: success()
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=success -f context="Test" -f description="Tests passed" \
          || echo "::warning::Failed to report success status on $SHA"

      - name: Report failure
        if: failure()
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=failure -f context="Test" -f description="Tests failed" \
          || echo "::warning::Failed to report failure status on $SHA"

  lint-release-pr:
    name: Lint (Release PR)
    needs: release-please
    if: >-
      needs.release-please.result == 'success'
      && needs.release-please.outputs.release_created != 'true'
      && needs.release-please.outputs.pr_head_sha != ''
    runs-on: ubuntu-latest
    permissions:
      contents: read
      statuses: write
    steps:
      - name: Set pending status
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=pending -f context="Lint" -f description="Running lint..." \
          || echo "::warning::Failed to set pending status on $SHA"

      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          ref: ${{ needs.release-please.outputs.pr_head_sha }}
          persist-credentials: false

      - name: Setup pnpm
        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
        with:
          run_install: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 18

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Lint
        run: pnpm lint:ci

      - name: Report success
        if: success()
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=success -f context="Lint" -f description="Lint passed" \
          || echo "::warning::Failed to report success status on $SHA"

      - name: Report failure
        if: failure()
        continue-on-error: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SHA: ${{ needs.release-please.outputs.pr_head_sha }}
          REPO: ${{ github.repository }}
        run: |
          gh api "repos/$REPO/statuses/$SHA" \
            -f state=failure -f context="Lint" -f description="Lint failed" \
          || echo "::warning::Failed to report failure status on $SHA"

  publish:
    name: Publish to npm
    needs: release-please
    if: >-
      needs.release-please.result == 'success'
      && needs.release-please.outputs.release_created == 'true'
    runs-on: ubuntu-latest
    environment: release
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          ref: ${{ needs.release-please.outputs.tag_name }}
          persist-credentials: false

      - name: Setup pnpm
        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5
        with:
          run_install: false

      - name: Setup Node.js
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
          node-version: 24
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build
        run: pnpm tsup

      - name: Publish
        env:
          NPM_TAG: ${{ github.ref_name == 'beta' && 'beta' || 'latest' }}
        run: npm publish --provenance --access public --tag "$NPM_TAG"

      - name: Report publish failure
        if: failure()
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAG: ${{ needs.release-please.outputs.tag_name }}
          REPO: ${{ github.repository }}
        run: |
          echo "::error::npm publish failed for $TAG"
          gh release edit "$TAG" --repo "$REPO" \
            --notes "$(gh release view "$TAG" --repo "$REPO" --json body --jq .body)

          ---
          > **WARNING**: npm publish failed. Package was NOT published to npm." || true

  trigger-docs:
    name: Trigger Docs Build
    needs: [release-please, publish]
    if: >-
      needs.release-please.result == 'success'
      && needs.release-please.outputs.release_created == 'true'
      && needs.publish.result == 'success'
      && github.ref_name == 'master'
    runs-on: ubuntu-latest
    permissions:
      actions: write
    steps:
      - name: Dispatch build-docs workflow
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAG: ${{ needs.release-please.outputs.tag_name }}
          REPO: ${{ github.repository }}
        run: gh workflow run build-docs.yaml --repo "$REPO" --ref "$TAG"