prerelease.yml

name: release-main

on:
  push:
    branches: [ "main" ]

permissions:
  contents: read

env:
  NUGET_PACKAGES: ${{ github.workspace }}/.nuget/packages
  RELEASE_PACKAGES: ".artifacts/package/release/*.nupkg"

jobs:
  release:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Bootstrap Action Workspace
        id: bootstrap
        uses: ./.github/workflows/bootstrap

      - run: ./build.sh release --test-suite=skip-e2e
        name: Release

      - name: Generate build provenance
        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e  # v1.3.2
        with:
          subject-path: "${{ github.workspace }}/${{ env.RELEASE_PACKAGES }}"

      # Push to feedz.io 
      - name: publish canary packages to feedz.io
        run: dotnet nuget push '${{ env.RELEASE_PACKAGES }}' -k ${{ secrets.FEEDZ_IO_API_KEY }} -s ${{ secrets.FEEDZ_IO_API_URL }} --skip-duplicate --no-symbols
          
      # Push to GHPR for advertising purposes on the github landing page.
      # Sadly this still requires authentication to use as a nuget package repository
      - name: Publish canary packages github package repository
        shell: bash
        # this is a best effort to push to GHPR, we've observed it being unavailable intermittently
        continue-on-error: true
        run: dotnet nuget push '${{ env.RELEASE_PACKAGES }}' -k ${{ secrets.GITHUB_TOKEN }} --source "https://nuget.pkg.github.com/elastic/index.json" --skip-duplicate --no-symbols