dc_release.yml

name: 'DC: Release'

on:
  workflow_call:

# Special permissions required for OIDC authentication
permissions:
  id-token: write
  contents: read
  actions: read

jobs:
  call-gh-validate-release:
    if: github.event_name == 'release'
    uses: code-kern-ai/cicd-deployment-scripts/.github/workflows/gh_validate_release.yml@dev
    secrets: inherit

  # call-az-acr-release:
  #   needs: [call-gh-validate-release]
  #   if: always() && !failure()
  #   uses: code-kern-ai/cicd-deployment-scripts/.github/workflows/az_acr_release.yml@dev
  #   secrets: inherit

  call-dc-edit:
    needs: [call-gh-validate-release] # [call-az-acr-release]
    if: always() && !failure() && github.event_name == 'release'
    uses: code-kern-ai/cicd-deployment-scripts/.github/workflows/dc_edit.yml@dev
    secrets: inherit

  call-gh-release:
    # needs: [call-k8-deploy]
    needs: [call-dc-edit]
    if: always() && github.event_name == 'release'
    uses: code-kern-ai/cicd-deployment-scripts/.github/workflows/gh_release.yml@dev
    secrets: inherit
    with:
      deployment_status: "success"

  gh-delete-branch:
    name: 'GitHub: Delete Branch'
    runs-on: ubuntu-latest
    needs: [call-dc-edit]
    if: github.event_name == 'pull_request' && github.event.pull_request.merged && !failure() && !cancelled()
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.GH_TOKEN }}
      
      - name: Delete Branch
        shell: bash
        run: git push origin --delete ${{ github.head_ref }}