ci.yml

name: ci
on:
  push:
    branches:
      - "**"
  workflow_dispatch:

defaults:
  run:
    # NOTE: A bit stricter than the default bash options used by GitHub Actions
    # (bash --noprofile --norc -e -o pipefail {0})
    shell: bash --noprofile --norc -euo pipefail {0}

# NOTE: Set concurrency for the current workflow to 1
concurrency: ci-${{ github.ref }}-${{ github.workflow }}

jobs:
  build-and-release:
    timeout-minutes: 60
    runs-on: ubuntu-22.04
    permissions:
      contents: write
      pull-requests: write
      issues: write
    steps:
      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7

      - uses: capralifecycle/actions-lib/check-runtime-dependencies@e3bb96046b8b72962d3f08971adde45017d09346 # v1.5.1

      - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
        with:
          node-version: 20

      - uses: capralifecycle/actions-lib/configure-npm@e3bb96046b8b72962d3f08971adde45017d09346 # v1.5.1

      - name: install dependencies
        run: npm ci

      - name: lint
        run: npm run lint

      - name: prepare
        run: npm run test

      - name: example project - npm pack
        run: npm pack

      - name: example project - npm ci
        working-directory: example
        run: npm ci

      - name: example project - npm install
        working-directory: example
        run: npm install --no-save ../liflig-cdk-cloudfront-auth-0.0.0-development.tgz

      - name: example project - npm test
        run: npm run test
        working-directory: example

      - name: conditionally semantic release
        if: ${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.SHARED_NPMJS_TOKEN }}
        run: npm run semantic-release