reusable-docker.yml

name: Docker

on:
  workflow_call:
    inputs:
      registry:
        description: Docker registry
        type: string
        default: ghcr.io
      platforms:
        description: Docker platforms
        type: string
        default: linux/amd64,linux/arm64
      targets:
        description: Docker targets
        required: true
        type: string
      is-merged:
        description: Is merged
        type: boolean
        default: ${{ github.event.pull_request.merged == true }}
      is-release:
        description: Whether to release
        type: boolean
        default: true
      pr-head-sha:
        description: Pull request head SHA
        type: string
        default: ${{ github.event.pull_request.head.sha }}
      version:
        description: Next custom version (Not included prefix)
        type: string
        default: ""
    outputs:
      version:
        description: Next version
        value: ${{ jobs.calc-version.outputs.version }}
      tag:
        description: Next tag
        value: ${{ jobs.calc-version.outputs.tag }}
      changelog:
        description: Changelog
        value: ${{ jobs.calc-version.outputs.changelog }}
    secrets:
      DOCKER_USERNAME:
        description: Docker registry password
        required: true
      DOCKER_PASSWORD:
        description: Docker registry username
        required: true

jobs:
  # バージョンを計算する
  calc-version:
    name: Calculate next version
    runs-on: ubuntu-latest

    outputs:
      # バージョン
      version: ${{ steps.tag-version.outputs.new_version }}
      # バージョンタグ
      tag: ${{ steps.tag-version.outputs.new_tag }}
      # リリースノート
      changelog: ${{ steps.tag-version.outputs.changelog }}
      # プラットフォーム(アーキテクチャ)のマトリクス
      platform-matrix: ${{ steps.platform-matrix.outputs.matrix }}
      # latestタグへのマージが必要かどうか (複数のプラットフォームがある時は必要)
      need-merge: ${{ steps.platform-matrix.outputs.need-merge }}
      # ビルド対象情報のマトリクス
      targets-matrix: ${{ steps.targets-matrix.outputs.matrix }}
      # パッケージのアップロードが必要かどうか
      need-upload: ${{ steps.need-upload.outputs.need-upload }}

    steps:
      - name: 📥 Check out the repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          # マージされていない時には github.event.pull_request.head.sha を使い、マージされた時にはgithub.base_refを使う
          ref: ${{ inputs.is-merged == true && github.base_ref || inputs.pr-head-sha }}
          fetch-depth: 0

      - name: 🏷️ Bump version and push tag
        id: tag-version
        uses: mathieudutour/github-tag-action@v6.2
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          default_bump: "minor"
          custom_release_rules: "feat:minor:✨ Features,fix:patch:🐛 Fixes,docs:patch:📰 Docs,chore:patch:🎨 Chore,pref:patch:🎈 Performance improvements,refactor:patch:🧹 Refactoring,build:patch:🔍 Build,ci:patch:🔍 CI,revert:patch:⏪ Revert,style:patch:🧹 Style,test:patch:👀 Test,release:major:📦 Release"
          dry_run: ${{ inputs.is-merged == true && 'false' || 'true' }}
          custom_tag: ${{ inputs.version }}

      - name: 📊 Set platform matrix
        id: platform-matrix
        run: |
          # shellcheck disable=SC2312
          echo "matrix=[$(echo "${{ inputs.platforms }}" | sed -r -e 's/([^,]+)/\"\1\"/g' -e 's/([^,]+),/\1,/g')]" >> $GITHUB_OUTPUT
          # ,があるときはneed-merge=true
          echo "need-merge=$(echo "${{ inputs.platforms }}" | grep -q ',' && echo true || echo false)" >> $GITHUB_OUTPUT

      - name: 🎯 Set targets matrix
        id: targets-matrix
        uses: actions/github-script@v7
        with:
          script: |
            core.setOutput('matrix', process.env.TARGETS)
        env:
          TARGETS: ${{ inputs.targets }}

      - name: 📦 Check if need package upload
        id: need-upload
        run: |
          # package.json がない場合は false
          if [ ! -f package.json ]; then
            echo "need-upload=false" >> $GITHUB_OUTPUT
            exit 0
          fi
          # "ncc build" が package.json にある場合は true、ない場合は false
          echo "need-upload=$(grep -q 'ncc build' package.json && echo true || echo false)" >> $GITHUB_OUTPUT

  # Dockerイメージをビルドする
  build:
    name: Docker build (${{ matrix.target.packageName }}, ${{ matrix.platform }})
    runs-on: ubuntu-latest
    needs: calc-version

    strategy:
      fail-fast: false
      matrix:
        # ビルドするプラットフォーム
        platform: ${{ fromJSON(needs.calc-version.outputs.platform-matrix) }}
        # ビルドするDockerfile
        target: ${{ fromJSON(needs.calc-version.outputs.targets-matrix) }}

    steps:
      - name: 🗑️ Remove platform prefix
        id: platform
        run: |
          echo "shortPlatform=$(echo "${{ matrix.platform }}" | sed -r -e 's/^[^\/]+\///')" >> $GITHUB_OUTPUT
          echo "shortHyphenPlatform=$(echo "${{ matrix.platform }}" | sed -r -e 's/^[^\/]+\///' -e 's/\//-/g')" >> $GITHUB_OUTPUT

      - name: 🚀 Create GitHub deployment
        uses: chrnorm/deployment-action@v2.0.7
        if: inputs.is-merged == true
        id: deployment
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          ref: ${{ needs.calc-version.outputs.tag }}
          environment: "${{ matrix.target.packageName }}:${{ steps.platform.outputs.shortPlatform }}"
          environment-url: https://github.com/${{ github.repository }}/pkgs/container/${{ matrix.target.packageName }}

      - name: 🔄 Update deployment status (in_progress)
        uses: chrnorm/deployment-status@v2.0.3
        if: inputs.is-merged == true
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          state: in_progress
          deployment-id: ${{ steps.deployment.outputs.deployment_id }}

      - name: 📥 Check out the repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          # マージされていない時には github.event.pull_request.head.sha を使い、マージされた時にはgithub.base_refを使う
          ref: ${{ inputs.is-merged == true && github.base_ref || inputs.pr-head-sha }}

      - name: 🛠️ Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: 🐳 Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        with:
          install: true

      - name: 🔑 Login to ${{ inputs.registry }}
        if: inputs.is-merged == true
        uses: docker/login-action@v3.3.0
        with:
          registry: ${{ inputs.registry }}
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: 📝 package.json update version
        run: |
          find . -type d -name node_modules -prune -o -type f -name package.json -exec sed -r -i "1,/version/s/\"version\": \".+\"/\"version\": \"${{ needs.calc-version.outputs.version }}\"/" {} \;
          git diff

      - name: 🏷️ Set tag suffix value
        id: tag
        run: |
          if [ "${{ needs.calc-version.outputs.need-merge }}" = "true" ]; then
            echo "suffix=-${{ steps.platform.outputs.shortHyphenPlatform }}" >> $GITHUB_OUTPUT
          else
            echo "suffix=" >> $GITHUB_OUTPUT
          fi

      - name: 📦 Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v5.6.1
        with:
          images: ${{ inputs.registry }}/${{ matrix.target.imageName }}
          tags: |
            # need-mergeがtrueの時はshortHyphenPlatformを含める (latest-arm64)
            # need-mergeがfalseの時はshortHyphenPlatformを含めない (latest)
            type=raw,value=${{ needs.calc-version.outputs.tag }}${{ steps.tag.outputs.suffix }}
            type=raw,value=latest${{ steps.tag.outputs.suffix }}

      - name: 🏗️ Build and push Docker image
        uses: docker/build-push-action@v6.13.0
        with:
          context: ${{ matrix.target.context }}
          file: ${{ matrix.target.file }}
          push: ${{ inputs.is-merged == true }}
          platforms: ${{ matrix.platform }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=gha,scope=${{ matrix.target.packageName }}-${{ steps.platform.outputs.shortHyphenPlatform }}
          cache-to: type=gha,mode=max,scope=${{ matrix.target.packageName }}-${{ steps.platform.outputs.shortHyphenPlatform }}
          provenance: false

      - name: 🔄 Update deployment status (success)
        uses: chrnorm/deployment-status@v2.0.3
        if: ${{ success() && inputs.is-merged == true }}
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          state: success
          deployment-id: ${{ steps.deployment.outputs.deployment_id }}

      - name: 🔄 Update deployment status (failure)
        if: ${{ failure() && inputs.is-merged == true }}
        uses: chrnorm/deployment-status@v2.0.3
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          state: failure
          deployment-id: ${{ steps.deployment.outputs.deployment_id }}

  finished-build:
    name: Check finished Docker CI
    runs-on: ubuntu-latest
    if: always()
    needs:
      - calc-version
      - build
    permissions:
      actions: read

    steps:
      - name: Check build failure
        run: |
          echo "Build status: ${{ needs.build.result }}"
          if [ "${{ needs.build.result }}" != "success" ]; then
            echo "Build failed"
            exit 1
          fi

  # 各プラットフォームのlatestからlatestタグにマージしてイメージを作成
  merge-latest:
    name: Merge latest (${{ matrix.target.packageName }})
    runs-on: ubuntu-latest
    if: inputs.is-merged == true && inputs.is-release == true
    needs:
      - calc-version
      - build

    strategy:
      fail-fast: false
      matrix:
        # ビルドするDockerfile
        target: ${{ fromJSON(needs.calc-version.outputs.targets-matrix) }}

    steps:
      - name: 🔑 Login to ${{ inputs.registry }}
        if: inputs.is-merged == true
        uses: docker/login-action@v3.3.0
        with:
          registry: ${{ inputs.registry }}
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: 📝 Create extra-images list
        id: extra-images
        run: |
          echo "images=$(echo "${{ inputs.platforms }}" | sed -r 's#([a-z]+)\/([a-z0-9]+)#${{ inputs.registry }}\/${{ matrix.target.imageName }}:latest-\2#g')" >> $GITHUB_OUTPUT

      - name: 📝 Create and push manifest images (latest)
        uses: Noelware/docker-manifest-action@0.4.2
        # プラットフォームがひとつの場合はマージ処理を行わない
        if: ${{ needs.calc-version.outputs.need-merge == 'true' }}
        with:
          images: ${{ steps.extra-images.outputs.images }}
          inputs: ${{ inputs.registry }}/${{ matrix.target.imageName }}:latest
          push: true

      - name: 📝 Create and push manifest images (version)
        uses: Noelware/docker-manifest-action@0.4.2
        # プラットフォームがひとつの場合はマージ処理を行わない
        if: ${{ needs.calc-version.outputs.need-merge == 'true' }}
        with:
          images: ${{ steps.extra-images.outputs.images }}
          inputs: ${{ inputs.registry }}/${{ matrix.target.imageName }}:${{ needs.calc-version.outputs.tag }}
          push: true

  release:
    name: Release ${{ needs.calc-version.outputs.tag }}
    runs-on: ubuntu-latest
    if: inputs.is-merged == true && inputs.is-release == true
    needs:
      - calc-version
      - build
      - merge-latest

    outputs:
      upload_url: ${{ steps.create_release.outputs.upload_url }}

    steps:
      - name: 📦 Create Release
        id: create_release
        uses: ncipollo/release-action@v1.15.0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag: ${{ needs.calc-version.outputs.tag }}
          name: ${{ needs.calc-version.outputs.tag }}
          body: ${{ needs.calc-version.outputs.changelog }}
          draft: false
          prerelease: false

  upload-package:
    name: Upload package ${{ needs.calc-version.outputs.tag }}
    runs-on: ubuntu-latest
    if: inputs.is-merged == true && inputs.is-release == true && needs.calc-version.outputs.need-upload == 'true'
    needs:
      - calc-version
      - build
      - merge-latest
      - release

    steps:
      - name: 📥 Check out the repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          # マージされていない時には github.event.pull_request.head.sha を使い、マージされた時にはgithub.base_refを使う
          ref: ${{ inputs.is-merged == true && github.base_ref || inputs.pr-head-sha }}

      - name: 📂 Check exists .node-version
        id: check-node-version-file
        run: |
          if [ ! -f ".node-version" ]; then
            echo "exists=false" >> $GITHUB_OUTPUT
          else
            echo "exists=true" >> $GITHUB_OUTPUT
          fi

      - name: 🏗️ Setup node env
        uses: actions/setup-node@v4
        if: ${{ steps.check-node-version-file.outputs.exists == 'true' }}
        with:
          node-version-file: .node-version

      - name: 🏗️ Setup node env
        if: ${{ steps.check-node-version-file.outputs.exists == 'false' }}
        uses: actions/setup-node@v4
        with:
          node-version: 18

      - name: 📝 Check package manager
        id: check-package-manager
        run: |
          if [ -f "yarn.lock" ]; then
            echo "package-manager=yarn" >> "$GITHUB_OUTPUT"
          elif [ -f "pnpm-lock.yaml" ]; then
            echo "package-manager=pnpm" >> "$GITHUB_OUTPUT"
          else
            echo "package-manager=npm" >> "$GITHUB_OUTPUT"
          fi

      - name: Setup pnpm
        uses: pnpm/action-setup@v4
        if: ${{ steps.check-package-manager.outputs.package-manager == 'pnpm' }}
        with:
          run_install: false

      - name: 📦 Install dependencies
        run: |
          if [ "${{ steps.check-package-manager.outputs.package-manager }}" == "yarn" ]; then
            yarn install --frozen-lockfile
          elif [ "${{ steps.check-package-manager.outputs.package-manager }}" == "pnpm" ]; then
            pnpm install --frozen-lockfile --prefer-frozen-lockfile
          else
            npm install
          fi

      - name: 🎁 Run package
        run: |
          if [ "${{ steps.check-package-manager.outputs.package-manager }}" == "yarn" ]; then
            yarn package
          elif [ "${{ steps.check-package-manager.outputs.package-manager }}" == "pnpm" ]; then
            pnpm run package
          else
            npm run package
          fi

      - name: 📦 Create zip
        id: create-zip
        run: |
          REPO="${GITHUB_REPOSITORY#"${GITHUB_REPOSITORY_OWNER}/"}"
          ZIP_FILENAME=${REPO}_${{ needs.calc-version.outputs.tag }}.zip
          ZIP_PATH=$(pwd)/output/${ZIP_FILENAME}
          cd output
          zip -r ${ZIP_PATH} ./*
          echo "zip-path=${ZIP_PATH}" >> $GITHUB_OUTPUT
          echo "zip-filename=${ZIP_FILENAME}" >> $GITHUB_OUTPUT

      - name: 📂 ls
        run: |
          pwd
          ls -la

      - name: 📤 Upload Release Asset
        uses: shogo82148/actions-upload-release-asset@v1.7.8
        with:
          upload_url: ${{ needs.release.outputs.upload_url }}
          asset_path: ${{ steps.create-zip.outputs.zip-path }}
          asset_name: ${{ steps.create-zip.outputs.zip-filename }}