release.yml

name: Release

on:
  workflow_dispatch:

env:
  JAVA_VERSION: 21


jobs:
  release:
    permissions:
      contents: write
      packages: write
    outputs:
      release_tag: ${{ steps.tag_commit.outputs.release_tag }}

    runs-on: ubuntu-latest

    steps:
      - name: Generate GitHub App Token
        id: app-token
        uses: actions/create-github-app-token@v2
        with:
          app-id: ${{ secrets.BOT_APP_ID }}
          private-key: ${{ secrets.BOT_PRIVATE_KEY }}

      - name: Checkout
        uses: actions/checkout@v6
        with:
          token: ${{ steps.app-token.outputs.token }}

      - name: Set up JDK ${{ env.JAVA_VERSION }}
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: ${{ env.JAVA_VERSION }}
          cache: 'gradle'

      - name: Switch to release
        run: |
          ./gradlew switchToRelease

      - name: Build uber-jar
        run: ./gradlew build -Dquarkus.package.jar.type=uber-jar

      - name: Commit changes
        shell: bash
        run: |
          VERSION=$(grep "switchBotMcpServerVersion=" gradle.properties | cut -d'=' -f2)
          git config user.name "sharplab-bot"
          git config user.email "actions@github.com"
          git add .
          git commit --allow-empty -m "Release ${VERSION}"

      - name: Push commit
        shell: bash
        run: |
          git fetch
          git rebase origin/master
          git push

      - name: Tag commit
        id: tag_commit
        shell: bash
        run: |
          VERSION=$(grep "switchBotMcpServerVersion=" gradle.properties | cut -d'=' -f2)
          TAG="${VERSION}.RELEASE"
          git tag "${TAG}"
          echo "release_tag=${TAG}" >> $GITHUB_OUTPUT

      - name: Push tag
        shell: bash
        run: |
          git push origin "${{ steps.tag_commit.outputs.release_tag }}"

      - name: Create GitHub Release
        id: create_release
        uses: actions/create-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ steps.tag_commit.outputs.release_tag }}
          release_name: Release ${{ steps.tag_commit.outputs.release_tag }}
          draft: false
          prerelease: false

      - name: Upload Release Asset
        uses: actions/upload-release-asset@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.create_release.outputs.upload_url }}
          asset_path: ./switchbot-mcp-server/build/switchbot-mcp-server.jar
          asset_name: switchbot-mcp-server.jar
          asset_content_type: application/java-archive

  push-to-ghcr:
    permissions:
      contents: read
      packages: write
    needs:
      - release
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: ${{ needs.release.outputs.release_tag }}

      - name: Log in to the GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/${{ github.repository }}
          tags: |
            type=raw,value=${{ needs.release.outputs.release_tag }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./switchbot-mcp-server/src/main/docker/Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          provenance: true
          sbom: true

  push-to-quay:
    permissions:
      contents: read
      packages: write
    needs:
      - release
    runs-on: ubuntu-latest
    env:
      REGISTRY: quay.io
      IMAGE: sharplab/switchbot-mcp-server
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          ref: ${{ needs.release.outputs.release_tag }}

      - name: Log in to Quay.io
        uses: redhat-actions/podman-login@v1
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.QUAY_BOT_USERNAME }}
          password: ${{ secrets.QUAY_BOT_TOKEN }}

      - name: Build image (buildah)
        id: build_image
        uses: redhat-actions/buildah-build@v2
        with:
          image: ${{ env.IMAGE }}
          tags: ${{ needs.release.outputs.release_tag }}
          containerfiles: |
            ./switchbot-mcp-server/src/main/docker/Dockerfile
          context: .

      - name: Push to Quay
        uses: redhat-actions/push-to-registry@v2
        with:
          image: ${{ steps.build_image.outputs.image }}
          tags: ${{ steps.build_image.outputs.tags }}
          registry: ${{ env.REGISTRY }}