publish.yml

# For every push to the master branch, this checks if the release-plan was
# updated and if it was it will publish stable npm packages based on the
# release plan

name: Publish Stable

on:
  workflow_dispatch:
  push:
    branches:
      - main
      - master

concurrency:
  group: publish-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

jobs:
  check-plan:
    name: "Check Release Plan"
    runs-on: ubuntu-latest
    outputs:
      command: ${{ steps.check-release.outputs.command }}

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          ref: "main"
      # This will only cause the `check-plan` job to have a result of `success`
      # when the .release-plan.json file was changed on the last commit. This
      # plus the fact that this action only runs on main will be enough of a guard
      - id: check-release
        run: if git diff --name-only HEAD HEAD~1 | grep -w -q ".release-plan.json"; then echo "command=release"; fi >> $GITHUB_OUTPUT

  publish:
    name: "NPM Publish"
    runs-on: ubuntu-latest
    needs: check-plan
    if: needs.check-plan.outputs.command == 'release'
    permissions:
      contents: write
      pull-requests: write

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 18
          # This creates an .npmrc that reads the NODE_AUTH_TOKEN environment variable
          registry-url: "https://registry.npmjs.org"

      - name: install pnpm
        run: npm i -g pnpm
      - run: pnpm install --frozen-lockfile
      - name: npm publish
        run: pnpm release-plan publish
        env:
          GITHUB_AUTH: ${{ secrets.GITHUB_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
      - name: install workflow-dispatch
        run: npm i --no-save git+https://github.com/benc-uk/workflow-dispatch.git#v1.2.4
      - name: fetch tags
        id: fetch-tags
        run: echo "latest_tag=$(git describe --tags --abbrev=0)" >> $GITHUB_OUTPUT
      - name: call workflow
        run: node ./node_modules/workflow-dispatch/dist/index.js
        env:
          INPUT_SIGNOFF: true
          INPUT_WORKFLOW: Test, Build & Publish
          INPUT_REF: ${{ steps.fetch-tags.outputs.latest_tag }}