deploy.yml

name: Deploy code to staging or production

on:
  push:
    branches: [staging, production]

jobs:
  validate:
    runs-on: ubuntu-latest
    outputs:
      isAutomatedPullRequest: ${{ steps.isAutomatedPullRequest.outputs.IS_AUTOMERGE_PR }}

    steps:
      - name: Get merged pull request
        id: getMergedPullRequest
        # TODO: Point back action actions-ecosystem after https://github.com/actions-ecosystem/action-get-merged-pull-request/pull/223 is merged
        uses: roryabraham/action-get-merged-pull-request@7a7a194f6ff8f3eef58c822083695a97314ebec1
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}

      - name: Check if merged pull request was an automatic version bump PR
        id: isAutomatedPullRequest
        run: echo "::set-output name=IS_AUTOMERGE_PR::${{ steps.getMergedPullRequest.outputs.author == 'OSBotify' }}"

  deployStaging:
    runs-on: ubuntu-latest
    needs: validate
    if: ${{ fromJSON(needs.validate.outputs.isAutomatedPullRequest) && github.ref == 'refs/heads/staging' }}

    steps:
      - name: Checkout staging branch
        uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
        with:
          ref: staging
          token: ${{ secrets.OS_BOTIFY_TOKEN }}

      - uses: Expensify/App/.github/actions/composite/setupGitForOSBotify@main
        with:
          GPG_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}

      - name: Tag version
        run: git tag "$(npm run print-version --silent)"

      - name: 🚀 Push tags to trigger staging deploy 🚀
        run: git push --tags

  deployProduction:
    runs-on: ubuntu-latest
    needs: validate
    if: ${{ fromJSON(needs.validate.outputs.isAutomatedPullRequest) && github.ref == 'refs/heads/production' }}

    steps:
      - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8
        with:
          fetch-depth: 0
          token: ${{ secrets.OS_BOTIFY_TOKEN }}

      - uses: Expensify/App/.github/actions/composite/setupGitForOSBotify@main
        with:
          GPG_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}

      - name: Checkout production branch
        run: git checkout production

      - name: Get current app version
        run: echo "PRODUCTION_VERSION=$(npm run print-version --silent)" >> "$GITHUB_ENV"

      - name: Get Release Pull Request List
        id: getReleasePRList
        uses: Expensify/App/.github/actions/javascript/getDeployPullRequestList@main
        with:
          TAG: ${{ env.PRODUCTION_VERSION }}
          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}
          IS_PRODUCTION_DEPLOY: true

      - name: Generate Release Body
        id: getReleaseBody
        uses: Expensify/App/.github/actions/javascript/getReleaseBody@main
        with:
          PR_LIST: ${{ steps.getReleasePRList.outputs.PR_LIST }}

      - name: 🚀 Create release to trigger production deploy 🚀
        uses: softprops/action-gh-release@affa18ef97bc9db20076945705aba8c516139abd
        with:
          tag_name: ${{ env.PRODUCTION_VERSION }}
          body: ${{ steps.getReleaseBody.outputs.RELEASE_BODY }}

        env:
          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}