_download-and-package.gotmpl.yml

---
# This workflow uses actions that are not certified by GitHub. They are provided
# by a third-party and are governed by separate terms of service, privacy
# policy, and support documentation.

{{ .DoNotEdit }}

name: "📦 Build {{ .Package }}"
on:
  workflow_dispatch:
  push:
    branches: [main]
    paths:
      - ".github/workflows/build-{{ .Package }}.yml"
      - "packages/{{ .Package }}/**"
  pull_request:
    branches: [main]
    paths:
      - ".github/workflows/build-{{ .Package }}.yml"
      - "packages/{{ .Package }}/**"
  schedule:
    - cron: '{{ .CronExpr }}'

defaults:
  run:
    shell: bash

env:
  DOCKER_BUILDKIT: 1
  REGISTRY: {{ "${{" }} vars.REGISTRY {{ "}}" }}

permissions: read-all

jobs:
  lookup:
    runs-on: ubuntu-latest
    name: Lookup current version
    permissions:
      packages: write
      contents: read
    strategy:
      fail-fast: false

    container:
      image: ghcr.io/northwood-labs/package-builder/ubuntu-v22.04:latest
      credentials:
        username: {{ "${{" }} github.actor {{ "}}" }}
        password: {{ "${{" }} secrets.GITHUB_TOKEN {{ "}}" }}

    outputs:
      cache_hit: {{ "${{" }} steps.check.outputs.cache-hit {{ "}}" }}
      package_version: {{ "${{" }} steps.lookup_version.outputs.package_version {{ "}}" }}

    steps:
      - name: Lookup latest version of package
        id: lookup_version
        env:
          GITHUB_TOKEN: {{ "${{" }} secrets.GITHUB_TOKEN {{ "}}" }}
        run: |
          echo "package_version=$(download-asset latest-tag -r '{{ .OwnerRepo }}' -s)" >> $GITHUB_OUTPUT

      - name: Check to see if we've already built this version
        uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
        id: check
        with:
          key: "{{ .Package }}-{{ "${{" }} steps.lookup_version.outputs.package_version {{ "}}" }}"
          path: "packages/{{ .Package }}/dist"
          lookup-only: true

  build:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: lookup
    name: "📦 Build and cache"
    uses: northwood-labs/package-building/.github/workflows/_build-and-cache.yml@main
    secrets: inherit
    with:
      package-name: "{{ .Package }}"
      package-version: {{ "${{" }} needs.lookup.outputs.package_version {{ "}}" }}

  upload:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: build
    name: Upload to S3
    uses: northwood-labs/package-building/.github/workflows/upload-to-s3.yml@main
    secrets: inherit
    with:
      package-name: "{{ .Package }}"
      package-version: {{ "${{" }} needs.lookup.outputs.package_version {{ "}}" }}

  metadata_rpm:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: RPM metadata
    uses: northwood-labs/package-building/.github/workflows/generate-rpm-meta.yml@main
    secrets: inherit

  metadata_deb:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: DEB metadata
    uses: northwood-labs/package-building/.github/workflows/generate-deb-meta.yml@main
    secrets: inherit

  metadata_apk:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: APK metadata
    uses: northwood-labs/package-building/.github/workflows/generate-apk-meta.yml@main
    secrets: inherit