ci: Don't republish chart

Author: danopia

.github/workflows/deno-ci.yaml

@@ -96,58 +96,81 @@ jobs:
     runs-on: ubuntu-latest
     name: Check Helm chart
 
+    outputs:
+      new-tag: chart-v${{ steps.chart.outputs.version }}
+      needs-release: ${{ steps.check-tag.outputs.exists == 'false' }}
     steps:
     - name: Checkout source
       uses: actions/checkout@v5
 
     - name: Install Helm
       uses: azure/setup-helm@v4
-      with:
-        token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Evaluate Chart
       run: time helm template helm-chart
 
+    - name: Determine chart version
+      id: chart
+      run: |
+        helm show chart helm-chart
+        VERSION=$(helm show chart helm-chart|grep version|cut -d' ' -f2)
+        echo "Helm chart version is $VERSION"
+        echo "version=$VERSION" >> $GITHUB_OUTPUT
+    - name: Check if chart tag exists already
+      uses: mukunku/[email protected]
+      id: check-tag
+      with:
+        tag: 'chart-v${{ steps.chart.outputs.version }}'
+
   push-chart:
     needs:
     - push
     - check-chart
     runs-on: ubuntu-latest
     name: 'Push Helm chart'
-    if: github.event_name == 'push'
+    if: ${{ github.event_name == 'push' && needs.check-chart.outputs.needs-release == 'true' }}
 
     permissions:
-      contents: read
+      contents: write
       packages: write
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v5
-
-      - name: Determine image tag
-        id: name
-        run: |
-          if [[ "${{ github.ref }}" == "refs/tags/"* ]]
-          then VERSION=$( echo $VERSION | sed -e 's/^v//' )
-          else VERSION=$( echo ${{ github.sha }} | cut -c1-7 )
-          fi
-          echo "Will push tag $VERSION"
-          echo "tag=$VERSION" >> $GITHUB_OUTPUT
-
-      - name: Install Helm
-        uses: azure/setup-helm@v4
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to GitHub Container Registry
-        run: echo "${GITHUB_TOKEN}" | helm registry login ghcr.io --username ${GITHUB_ACTOR} --password-stdin
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    - name: Checkout
+      uses: actions/checkout@v5
 
-      - name: Package chart
-        working-directory: helm-chart
-        run: helm package . -u -d dist --app-version "${{ steps.name.outputs.tag }}"
+    - name: Install Helm
+      uses: azure/setup-helm@v4
 
-      - name: Push chart
-        working-directory: helm-chart
-        run: helm push dist/*.tgz oci://ghcr.io/cloudydeno/charts
+    - name: Determine image tag
+      id: name
+      run: |
+        if [[ "${{ github.ref }}" == "refs/tags/"* ]]
+        then VERSION=$( echo $VERSION | sed -e 's/^v//' )
+        else VERSION=$( echo ${{ github.sha }} | cut -c1-7 )
+        fi
+        echo "Will push tag $VERSION"
+        echo "tag=$VERSION" >> $GITHUB_OUTPUT
+
+    - name: Login to GitHub Container Registry
+      run: echo "${GITHUB_TOKEN}" | helm registry login ghcr.io --username ${GITHUB_ACTOR} --password-stdin
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Package chart
+      working-directory: helm-chart
+      run: helm package . -u -d dist --app-version "${{ steps.name.outputs.tag }}"
+
+    - name: Push chart
+      working-directory: helm-chart
+      run: helm push dist/*.tgz oci://ghcr.io/cloudydeno/charts
+
+    - name: Create chart tag
+      uses: actions/github-script@v5
+      with:
+        script: |
+          github.rest.git.createRef({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            ref: 'refs/tags/${{ needs.check-chart.outputs.new-tag }}',
+            sha: context.sha
+          })