release.yml

name: Release

on: workflow_dispatch

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  contents: write
  packages: write

jobs:
  release:
    runs-on: ubuntu-latest
    env:
      GH_ACTIONS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
    - name: Checkout Code
      uses: actions/checkout@v6
      with:
         # get enough commits to hopefully allow goreleaser to generate a proper
         # changelog since the last release
        fetch-depth: 100
    - name: Setup Go Module Access Token
      run: |
        git config --global url."https://x-access-token:$GH_ACTIONS_TOKEN@github.com/fastcat/gdev".insteadOf https://github.com/fastcat/gdev
    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.work'
        cache-dependency-path: |
          go.mod
          **/go.mod
    - name: Tag Release
      id: semrel
      uses: go-semantic-release/action@v1
      with:
        github-token: ${{ secrets.GITHUB_TOKEN }}
        allow-initial-development-versions: true
        force-bump-patch-version: true
    - name: Tag Submodules
      run: |
        set -xe
        ver="v${{ steps.semrel.outputs.version }}"
        # semrel-created tag will have only been created on the remote, fetch it
        git fetch origin "refs/tags/${ver}:refs/tags/${ver}"
        go tool mage -v tagSubModules "${ver}"
        git push origin $(git tag -l "*/${ver}")
    outputs:
        version: "${{ steps.semrel.outputs.version }}"

  publish-e-s-svc1:
    needs: release
    runs-on: ubuntu-latest
    env:
      GH_ACTIONS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
    - name: Checkout Code
      uses: actions/checkout@v6
      with:
        fetch-tags: true
    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.work'
        cache-dependency-path: |
          go.mod
          **/go.mod
    - name: Set up ko
      uses: ko-build/setup-ko@v0.9
    - name: Build & Publish svc1
      # TODO: use mage for this so it can pick up all the defined builds automatically
      # make sure to overwrite all the labels from the chainguard base image
      run: |
        # DRY?
        labels=(
          org.opencontainers.image.authors="fastcat"
          org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
          org.opencontainers.image.url=${{ github.repositoryUrl }}/tree/${{ github.sha }}/examples/stack/svc1
          org.opencontainers.image.revision=${{ github.sha }}
          org.opencontainers.image.licenses="Apache-2.0"
          org.opencontainers.image.version="${{ needs.release.outputs.version }}"
          org.opencontainers.image.vendor="fastcat"
        )
        labelargs=()
        for label in "${labels[@]}"; do
          labelargs+=(--image-label "$label" --image-annotation "$label")
        done
        ko build \
          --base-import-paths \
          "${labelargs[@]}" \
          --tags "latest,${{ needs.release.outputs.version }}" \
          ./examples/stack/svc1

  publish-e-s-svc2:
    needs: release
    runs-on: ubuntu-latest
    env:
      GH_ACTIONS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
    - name: Checkout Code
      uses: actions/checkout@v6
      with:
        fetch-tags: true
    - name: Set up NodeJS
      uses: actions/setup-node@v6
      with:
        node-version: "lts/*"
        # TODO: cache doesn't support rush
        cache-dependency-path: examples/stack/svc2/common/config/rush/pnpm-lock.yaml
    - name: "Build svc2"
      working-directory: examples/stack/svc2
      run: |
        set -xe
        node common/scripts/install-run-rush.js install
        node common/scripts/install-run-rush.js build --verbose
        node common/scripts/install-run-rush.js deploy
    - name: Docker Login
      uses: docker/login-action@v4
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    - name: Publish svc2
      uses: docker/build-push-action@v7
      with:
        context: examples/stack/svc2
        file: examples/stack/svc2/app/Dockerfile
        push: true
        tags: |
          ghcr.io/fastcat/gdev/svc2:${{ needs.release.outputs.version }}
          ghcr.io/fastcat/gdev/svc2:latest
        labels: |
          org.opencontainers.image.authors=fastcat
          org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
          org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}/tree/${{ github.sha }}/examples/stack/svc2
          org.opencontainers.image.revision=${{ github.sha }}
          org.opencontainers.image.licenses="Apache-2.0"
          org.opencontainers.image.version="${{ needs.release.outputs.version }}"
          org.opencontainers.image.vendor=fastcat
        annotations: |
          org.opencontainers.image.authors=fastcat
          org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
          org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}/tree/${{ github.sha }}/examples/stack/svc2
          org.opencontainers.image.revision=${{ github.sha }}
          org.opencontainers.image.licenses="Apache-2.0"
          org.opencontainers.image.version="${{ needs.release.outputs.version }}"
          org.opencontainers.image.vendor=fastcat

  publish-e-fs-ent-blog:
    needs: release
    runs-on: ubuntu-latest
    env:
      GH_ACTIONS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
    - name: Checkout Code
      uses: actions/checkout@v6
      with:
        fetch-tags: true
    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.work'
        cache-dependency-path: |
          go.mod
          **/go.mod
    - name: Set up ko
      uses: ko-build/setup-ko@v0.9
    - name: "Build & Publish ent-blog svc"
      # TODO: use mage for this so it can pick up all the defined builds automatically
      # make sure to overwrite all the labels from the chainguard base image
      run: |
        # DRY?
        labels=(
          org.opencontainers.image.authors="fastcat"
          org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
          org.opencontainers.image.url=${{ github.server_url }}/${{ github.repository }}/tree/${{ github.sha }}/examples/full-stack/ent-blog
          org.opencontainers.image.revision=${{ github.sha }}
          org.opencontainers.image.licenses="Apache-2.0"
          org.opencontainers.image.version="${{ needs.release.outputs.version }}"
          org.opencontainers.image.vendor="fastcat"
        )
        labelargs=()
        for label in "${labels[@]}"; do
          labelargs+=(--image-label "$label" --image-annotation "$label")
        done
        ko build \
          --base-import-paths \
          "${labelargs[@]}" \
          --tags "latest,${{ needs.release.outputs.version }}" \
          ./examples/full-stack/ent-blog

  publish-e-gdev-deb:
    needs: release
    runs-on: ubuntu-latest
    env:
      GH_ACTIONS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
    - name: Checkout Code
      uses: actions/checkout@v6
      with:
        fetch-tags: true
    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version-file: 'go.work'
        cache-dependency-path: |
          go.mod
          **/go.mod
    - name: Publish gdev example
      uses: goreleaser/goreleaser-action@v7
      with:
        workdir: examples/gdev
        args: release
      env:
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        # this is always a release build
        PKGSUFFIX: ""