release #1082
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| repository_dispatch: | |
| types: [release] | |
| workflow_dispatch: | |
| jobs: | |
| publish: | |
| name: Publish | |
| runs-on: ubuntu-latest | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| CHECKOUT_REF: ${{ github.event.client_payload.ref }} | |
| RELEASE_TYPE: ${{ github.event.client_payload.type }} | |
| outputs: | |
| published: ${{ steps.check-updates.outputs.published }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| # Pulls all commits (needed for semantic release to correctly version) | |
| # See https://github.com/semantic-release/semantic-release/issues/1526 | |
| fetch-depth: "0" | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 16 | |
| - name: Fetch git tags | |
| run: git fetch --depth=1 origin +refs/tags/*:refs/tags/* | |
| - name: Publish Setup | |
| run: | | |
| git config --global user.name 'github-actions[bot]' | |
| git config --global user.email 'github-actions[bot]@users.noreply.github.com' | |
| - name: Publish to NPM | |
| id: publish-npm | |
| env: | |
| NODE_AUTH_TOKEN: ${{secrets.HV_NPM_AUTOMATION_TOKEN}} | |
| run: | | |
| npm ci --include=dev | |
| npm config set //registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN | |
| if [[ "${{ github.ref_name }}" == "master" ]]; then | |
| npm run publish:release 2>&1 | tee publish_logs.txt | |
| elif [[ "${{ github.ref_name }}" == "next"* ]]; then | |
| npm run publish:next 2>&1 | tee publish_logs.txt | |
| else | |
| echo "Invalid event type: ${{ github.ref_name }}" | |
| exit 1 | |
| fi | |
| - name: Check if packages were updated | |
| id: check-updates | |
| run: | | |
| if grep -q "lerna success published" publish_logs.txt; then | |
| echo "New packages were published" | |
| echo "published=true" >> "$GITHUB_OUTPUT" | |
| elif grep -q "lerna Command failed" publish_logs.txt; then | |
| echo "lerna Command failed" | |
| exit 1 | |
| else | |
| echo "No packages were updated" | |
| echo "published=false" >> "$GITHUB_OUTPUT" | |
| fi | |
| publish-artifacts: | |
| name: Publish Artifacts | |
| needs: [publish] | |
| if: needs.publish.outputs.published == 'true' | |
| uses: ./.github/workflows/documentation.yml | |
| secrets: inherit | |
| with: | |
| publish-folder: ${{ github.ref_name }} | |
| notify-release: | |
| name: Notify release | |
| runs-on: ubuntu-latest | |
| needs: [publish-artifacts] | |
| env: | |
| DOCUMENTATION_URL: https://${{ github.repository_owner }}.github.io/uikit/${{ github.ref_name }}/ | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Get Releases Commit Message | |
| uses: actions/github-script@v3 | |
| with: | |
| github-token: ${{secrets.GITHUB_TOKEN}} | |
| script: | | |
| const branch = await github.repos.getBranch({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| branch: "${{ github.ref_name }}" | |
| }) | |
| const commitMessage = branch.data.commit.commit.message | |
| const slackMessage = commitMessage.replace('chore(release): publish', '') | |
| .replace(/\n/g, "\\n") | |
| .replace(/\r/g, "\\r") | |
| .replace(/\t/g, "\\t") | |
| .replace(/\f/g, "\\f") | |
| core.exportVariable("SLACK_MESSAGE", slackMessage) | |
| - name: Notify release | |
| uses: hbfernandes/slack-action@1.0 | |
| if: success() | |
| env: | |
| SLACK_TOKEN: ${{ secrets.SLACK_TOKEN }} | |
| with: | |
| args: | | |
| { | |
| "channel": "ui-kit", | |
| "attachments": [ | |
| { | |
| "mrkdwn_in": ["text"], | |
| "author_name": "New UI-Kit artifacts are available", | |
| "title": "More details https://github.com/${{github.repository}}/releases", | |
| "text": "${{env.SLACK_MESSAGE}}", | |
| "footer": "${{env.DOCUMENTATION_URL}}" | |
| } | |
| ] | |
| } | |
| security-scans: | |
| name: Security Scans | |
| needs: [publish-artifacts] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Trigger Security Scans | |
| # repo scope personal token is required to generate a dispatch event | |
| run: | | |
| curl -X POST \ | |
| https://api.github.com/repos/${{ github.repository }}/dispatches \ | |
| -H 'Authorization: token ${{ secrets.GITHUB_TOKEN }}' \ | |
| -d '{"event_type": "security"}' |