release-cd.yaml

name: Release & Deploy

on:
  push:
    branches:
      - 'release'

permissions:
  contents: read

jobs:
  check-committer:
    runs-on: ubuntu-latest
    outputs:
      should_run: ${{ steps.check.outputs.should_run }}
    steps:
      - id: check
        env:
          AUTHOR_EMAIL: ${{ github.event.commits[0].author.email }}
        run: |
          # Allow dependabot emails specifically
          if [[ "$AUTHOR_EMAIL" == *"dependabot[bot]@users.noreply.github.com"* ]]; then
            echo "should_run=true" >> $GITHUB_OUTPUT
          # Skip other noreply emails
          elif [[ "$AUTHOR_EMAIL" == *"@users.noreply.github.com"* ]]; then
            echo "should_run=false" >> $GITHUB_OUTPUT
          # Allow all other emails
          else
            echo "should_run=true" >> $GITHUB_OUTPUT
          fi

  bump-version:
    name: 'Bump Version and Tag'
    needs: check-committer
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      newTag: ${{ steps.bump.outputs.newTag }}

    if: ${{ needs.check-committer.outputs.should_run == 'true' }}

    steps:
      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.BUILD_APP_ID }}
          private-key: ${{ secrets.BUILD_PRIVATE_KEY }}

      - name: 'Checkout source code'
        uses: 'actions/checkout@v2'
        with:
          ref: ${{ github.ref }}
          token: ${{ steps.app-token.outputs.token }}

      - name: 'Automated Version Bump'
        id: bump
        uses: 'phips28/gh-action-bump-version@master'
        with:
          version-type: 'minor'
          commit-message: 'chore: bumps version to {{version}}'
          bump-policy: 'ignore'
          skip-push: 'true'

      - name: Get GitHub App User ID
        id: get-user-id
        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
        env:
          GH_TOKEN: ${{ steps.app-token.outputs.token }}

      - run: |
          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'

      - name: 'Create Tags and package version'
        run: |
          git push --follow-tags
          git push --tags

  create-release:
    name: 'Create Release'
    needs: bump-version
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0
      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '24'
      - name: Install dependencies
        run: yarn install --frozen-lockfile
      - name: Run build
        run: yarn build
      - uses: johnyherangi/create-release-notes@main
        id: create-release-notes
        env:
          GITHUB_TOKEN: ${{ github.token }}

      - name: Get Last PR Title and Description
        id: get-pr-info
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          PR_DATA=$(gh api graphql -f query='
            query {
              repository(owner: "${{ github.repository_owner }}", name: "${{ github.event.repository.name }}") {
                commit: object(expression: "${{ github.sha }}") {
                  ... on Commit {
                    associatedPullRequests(first: 1) {
                      edges {
                        node {
                          title
                          body
                        }
                      }
                    }
                  }
                }
              }
            }
          ')
          PR_TITLE=$(echo "$PR_DATA" | jq -r '.data.repository.commit.associatedPullRequests.edges[0].node.title')
          PR_BODY=$(echo "$PR_DATA" | jq -r '.data.repository.commit.associatedPullRequests.edges[0].node.body')
          echo "pr_title=$PR_TITLE" >> $GITHUB_OUTPUT
          echo "pr_body<<EOF" >> $GITHUB_OUTPUT
          echo "$PR_BODY" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT
      - uses: ncipollo/release-action@v1
        with:
          makeLatest: true
          artifacts: 'dist/**'
          generateReleaseNotes: true
          tag: ${{ needs.bump-version.outputs.newTag }}
          body: |
            ${{ steps.get-pr-info.outputs.pr_body }}


            ---

            ${{ steps.create-release-notes.outputs.release-notes }}
          name: '${{ needs.bump-version.outputs.newTag }} - ${{ steps.get-pr-info.outputs.pr_title }}'

  update-main:
    name: 'Update main branch with release changes'
    needs: bump-version
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.BUILD_APP_ID }}
          private-key: ${{ secrets.BUILD_PRIVATE_KEY }}

      - name: 'Checkout source code'
        uses: 'actions/checkout@v2'
        with:
          token: ${{ steps.app-token.outputs.token }}
          fetch-depth: 0
          ref: main

      - name: Get GitHub App User ID
        id: get-user-id
        run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
        env:
          GH_TOKEN: ${{ steps.app-token.outputs.token }}

      - run: |
          git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
          git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com'

      - name: Merge release into main
        run: |
          git fetch origin release
          git merge origin/release
          git push origin main