release.yml

name: "release-please"

on:
  push:
    branches:
      - "main"

env:
  DOCKER_BUILDKIT: 1
  FORCE_COLOR: 1

jobs:
  release-please:
    runs-on: ubuntu-latest

    outputs:
      release-created: ${{ steps.release.outputs['release_created'] }}
      tag-name: ${{ steps.release.outputs['tag_name'] }}
      version: ${{ steps.release.outputs['version'] }}
      pr: ${{ steps.release.outputs['pr'] }}

    steps:
      - name: Run release-please
        id: release
        uses: google-github-actions/release-please-action@v3
        with:
          token: ${{ secrets.FLUENCEBOT_RELEASE_PLEASE_PAT }}
          command: manifest
          config-file: .github/release-please/config.json
          manifest-file: .github/release-please/manifest.json

      - name: Show output from release-please
        if: steps.release.outputs.releases_created
        env:
          RELEASE_PLEASE_OUTPUT: ${{ toJSON(steps.release.outputs) }}
        run: echo "${RELEASE_PLEASE_OUTPUT}" | jq

  publish:
    if: needs.release-please.outputs.release-created
    needs: release-please
    strategy:
      matrix:
        flavour:
          - minimal
          - ipfs
          - rich

    permissions:
      contents: read
      id-token: write

    uses: ./.github/workflows/container.yml
    with:
      version: ${{ needs.release-please.outputs.version }}
      flavour: ${{ matrix.flavour }}
      release: true

  update-release:
    name: "Update release"
    runs-on: ubuntu-latest

    needs:
      - release-please
      - publish

    env:
      RELEASE_VERSION: ${{ needs.release-please.outputs.version }}

    steps:
      - name: Release
        uses: softprops/action-gh-release@v1
        with:
          tag_name: ${{ needs.release-please.outputs.tag-name }}
          append_body: true
          body: |

            ## Docker tags

            ### ipfs
            Contains Fluence nox and builtin IPFS deaemon.

            fluencelabs/nox:unstable
            fluencelabs/nox:${{ env.RELEASE_VERSION }}
            fluencelabs/nox:unstable_ipfs
            fluencelabs/nox:ipfs_${{ env.RELEASE_VERSION }}

            ## minimal
            Contains Fluence nox only.

            fluencelabs/nox:unstable_minimal
            fluencelabs/nox:minimal_${{ env.RELEASE_VERSION }}

            ## rich
            Contains Fluence nox, IPFS, ceramic cli, bitcoin cli and geth cli.

            fluencelabs/nox:unstable_rich
            fluencelabs/nox:rich_${{ env.RELEASE_VERSION }}

  slack:
    if: always()
    name: "Notify"
    runs-on: ubuntu-latest

    needs:
      - release-please
      - publish
      - update-release

    permissions:
      contents: read
      id-token: write

    steps:
      - uses: lwhiteley/dependent-jobs-result-check@v1
        id: status
        with:
          statuses: failure
          dependencies: ${{ toJSON(needs) }}

      - name: Log output
        run: |
          echo "statuses:" "${{ steps.status.outputs.statuses }}"
          echo "jobs:" "${{ steps.status.outputs.jobs }}"
          echo "found any?:" "${{ steps.status.outputs.found }}"

      - name: Import secrets
        uses: hashicorp/vault-action@v2.4.3
        with:
          url: https://vault.fluence.dev
          path: jwt/github
          role: ci
          method: jwt
          jwtGithubAudience: "https://github.com/fluencelabs"
          jwtTtl: 300
          exportToken: false
          secrets: |
            kv/slack/release-please webhook | SLACK_WEBHOOK_URL

      - uses: ravsamhq/notify-slack-action@v2
        if: steps.status.outputs.found == 'true'
        with:
          status: "failure"
          notification_title: "*{workflow}* has {status_message}"
          message_format: "${{ steps.status.outputs.jobs }} {status_message} in <{repo_url}|{repo}>"
          footer: "<{run_url}>"