From cc84e23560c244e267ebb3c5294c11e9f6ed3e1a Mon Sep 17 00:00:00 2001
From: rory <rory@expensify.com>
Date: Sun, 1 Oct 2023 16:15:16 +0800
Subject: [PATCH 1/2] Automatically publish eslint config on merge

---
 .github/workflows/publish.yml | 87 +++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 .github/workflows/publish.yml

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..9cb1952
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,87 @@
+name: Publish package to npmjs
+
+# This workflow runs when code is pushed to `main` (i.e: when a pull request is merged)
+on:
+  push:
+    branches: [main]
+
+# Ensure that only once instance of this workflow executes at a time.
+# If multiple PRs are merged in quick succession, there will only ever be one publish workflow running and one pending.
+concurrency: ${{ github.workflow }}
+
+jobs:
+  version:
+    runs-on: ubuntu-latest
+
+    # OSBotify will update the version on `main`, so this check is important to prevent an infinite loop
+    if: ${{ github.actor != 'OSBotify' }}
+
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          ref: main
+
+      - name: Decrypt & Import OSBotify GPG key
+        run: |
+          cd .github
+          gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" --output OSBotify-private-key.asc OSBotify-private-key.asc.gpg
+          gpg --import OSBotify-private-key.asc
+        env:
+          LARGE_SECRET_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}
+
+      - name: Set up git for OSBotify
+        run: |
+          git config --global user.signingkey 367811D53E34168C
+          git config --global commit.gpgsign true
+          git config --global user.name OSBotify
+          git config --global user.email infra+osbotify@expensify.com
+
+      - uses: actions/setup-node@v3
+        with:
+          node-version: '16.x'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Generate branch name
+        run: echo "BRANCH_NAME=OSBotify-bump-version-$(uuidgen)" >> $GITHUB_ENV
+
+      - name: Create branch for version-bump pull request
+        run: git checkout -b ${{ env.BRANCH_NAME }}
+
+      - name: Install npm packages
+        run: npm ci
+
+      - name: Update npm version
+        run: npm version patch
+
+      - name: Set new version in GitHub ENV
+        run: echo "NEW_VERSION=$(jq '.version' package.json)" >> $GITHUB_ENV
+
+      - name: Push branch and publish tags
+        run: git push --set-upstream origin ${{ env.BRANCH_NAME }} && git push --tags
+
+      - name: Create pull request
+        run: |
+          gh pr create \
+            --title "Update version to ${{ env.NEW_VERSION }}" \
+            --body "Update version to ${{ env.NEW_VERSION }}"
+          sleep 5
+        env:
+          GITHUB_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}
+
+      - name: Auto-approve pull request
+        run: gh pr review --approve ${{ env.BRANCH_NAME }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Auto-merge pull request
+        run: gh pr merge --merge --delete-branch ${{ env.BRANCH_NAME }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build package
+        run: npm run build
+
+      - name: Publish to npm
+        run: npm publish
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

From 1012b81c654f8ab5a88dd587232f83d8d459694e Mon Sep 17 00:00:00 2001
From: rory <rory@expensify.com>
Date: Mon, 2 Oct 2023 14:11:07 +0800
Subject: [PATCH 2/2] Add deploy comment

---
 .github/workflows/publish.yml | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9cb1952..64db7ea 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -21,6 +21,12 @@ jobs:
         with:
           ref: main
 
+      - name: Get merged pull request
+        id: getMergedPullRequest
+        uses: actions-ecosystem/action-get-merged-pull-request@59afe90821bb0b555082ce8ff1e36b03f91553d9
+        with:
+          github_token: ${{ github.token }}
+
       - name: Decrypt & Import OSBotify GPG key
         run: |
           cd .github
@@ -71,12 +77,12 @@ jobs:
       - name: Auto-approve pull request
         run: gh pr review --approve ${{ env.BRANCH_NAME }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Auto-merge pull request
         run: gh pr merge --merge --delete-branch ${{ env.BRANCH_NAME }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Build package
         run: npm run build
@@ -85,3 +91,9 @@ jobs:
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Comment on PR
+        run: gh pr comment ${{ steps.getMergedPullRequest.outputs.number }} --body \
+          ":rocket: Published in ${{ env.NEW_VERSION }}"
+        env:
+          GITHUB_TOKEN: ${{ github.token }}