chore: automate release

.github/workflows/approve-merge.yaml

@@ -0,0 +1,24 @@
+name: Merge Release PR
+
+on:
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  pr_approved:
+    if: ${{ github.event.review.state == 'approved' && github.event.pull_request.base.ref == 'master' && github.event.pull_request.head.ref == 'next' }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Clone git repo
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Merge PR
+        run: |
+          git checkout master
+          git merge --ff origin/next
+          git push -u origin master
+      - uses: peter-evans/repository-dispatch@v3
+        with:
+          event-type: release_master

.github/workflows/build.yaml

@@ -1,18 +1,16 @@
-name: build
+name: Build
 
 on: push
 
 jobs:
   build:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
-      - name: Checkout
-        uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - name: Setup NodeJS
-        uses: actions/setup-node@v1
+      - uses: actions/setup-node@v4
         with:
-          node-version: '20.8.0'
+          node-version-file: '.nvmrc'
 
       - name: Install Dependencies
         run: npm ci
@@ -21,29 +19,23 @@ jobs:
         run: npm run build
 
   test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     needs: build
     steps:
-      - name: Checkout
-        uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
-      - name: Setup NodeJS
-        uses: actions/setup-node@v1
+      - uses: actions/setup-node@v4
         with:
-          node-version: '20.8.0'
+          node-version-file: '.nvmrc'
 
-      - name: Setup System
-        uses: restorecommerce/setup-system-action@v1
-        with:
-          backing-only: true
+      - uses: restorecommerce/setup-system-action@v1
 
       - name: Install Dependencies
         run: npm ci
 
       - name: Test
         run: npm run test && npm run lcov-report
 
-      - name: Coveralls
-        uses: coverallsapp/github-action@master
+      - uses: coverallsapp/github-action@master
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-lint.yaml

@@ -0,0 +1,20 @@
+name: "Lint PR"
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+permissions:
+  pull-requests: read
+
+jobs:
+  lint:
+    name: pr-lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/action-semantic-pull-request@v5
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release-pr.yaml

@@ -0,0 +1,46 @@
+name: Release PR
+
+on:
+  push:
+    branches:
+      - next
+
+permissions:
+  contents: read
+
+jobs:
+  release_pr:
+    permissions:
+      issues: write
+      pull-requests: write
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Install Dependencies
+        run: npm clean-install
+
+      - name: Generate Changes
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -ex
+          echo '# Release Changes' > changes.md
+          npx semantic-release@22.0.12 -d -p '@semantic-release/release-notes-generator' -b next | grep -v semantic-release | tee -a changes.md
+          printf '\n---\n\n### Approve this PR to release above packages!' >> changes.md
+      - name: Create PR
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -ex
+          export PR_NUMBER=$(gh pr list -B master -H next --json number | jq -r '.[0].number')
+          if [[ "$(git rev-parse origin/master)" == "$(git rev-parse origin/next)" ]]; then exit 0; fi
+          if [[ "$PR_NUMBER" == "null" ]]; then gh pr create -B master -H next -t "chore: release" -F changes.md; fi
+          if [[ "$PR_NUMBER" != "null" ]]; then gh pr edit $PR_NUMBER -F changes.md; fi

.github/workflows/release.yaml

@@ -0,0 +1,49 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+    types: [release_master]
+
+jobs:
+  release:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: master
+
+      - name: Setup NodeJS
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Install Dependencies
+        run: npm clean-install
+
+      - name: Git Config
+        run: |
+          git config --global user.email "bot@restorecommerce.io"
+          git config --global user.name "Restorecommerce Bot"
+
+      - name: Build
+        run: npm run build --verbose
+
+      - name: NPM Token
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          echo "//registry.npmjs.org/:_authToken=$NODE_AUTH_TOKEN" > .npmrc
+
+      - name: Release
+        run: npx publish --no-verify-access --no-private --conventional-commits --yes --loglevel debug
+
+      - name: Sync next branch
+        run: |
+          git checkout next
+          git merge master
+          git push -u origin next 

.husky

@@ -0,0 +1,12 @@
+#!/usr/bin/env sh
+. "$(dirname -- "$0")/_/husky.sh"
+
+BRANCH=$(git rev-parse --abbrev-ref HEAD)
+
+if [ "$BRACH" = "main" ]
+then
+    echo "committing directly to main is blocked"
+    exit 1
+fi
+
+./node_modules/.bin/commitlint -e $1

.nvmrc

@@ -0,0 +1 @@
+20.11.1

package.json

@@ -65,6 +65,6 @@
     "build": "npm-run-all lint build:clean build:tsc"
   },
   "engines": {
-    "node": ">= 18.8.0"
+    "node": ">= 20.0.0"
   }
 }