release.yml

name: Release
on:
  release:
    types: [created]

jobs:
  ci:
    uses: ./.github/workflows/CI.yml
#    secrets:
#      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
#      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
#      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
    permissions:
      checks: write
      actions: read
      contents: read
      security-events: write

  cache-apt:
    runs-on: ubuntu-latest
    steps:
      - uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          version: 1.0
          packages: build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev

  prepare:
    needs: [cache-apt]
    # The type of runner that the job will run on
    runs-on: ubuntu-latest
    steps:
      - uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          version: 1.0
          packages: build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev

      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          node-version: lts/*

      - uses: pnpm/action-setup@v4
        name: Install pnpm
        id: pnpm-install
        with:
          run_install: true
          version: 8

      - name: Get pnpm store directory
        id: pnpm-cache
        shell: bash
        run: |
          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT

      - uses: actions/cache@v4
        name: Setup pnpm cache
        with:
          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-store-

      - name: Install dependencies
        run: pnpm install

  list-packages:
    runs-on: ubuntu-latest
    needs: [cache-apt]
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          version: 1.0
          packages: build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev

      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        name: Install pnpm
        id: pnpm-install
        with:
          run_install: true
          version: 8
      - id: set-matrix
        run: |
          export MATRIX=$(pnpm -s m ls --depth -1 -F "./packages/**" --json | jq -c)
          echo "matrix=${MATRIX}" | tee -a $GITHUB_OUTPUT

  # This workflow contains a single job called "build"
  build:
    needs: [ prepare, ci, list-packages ]
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # do a matrix test with different node versions
    strategy:
      fail-fast: false
      matrix:
        package: ${{ fromJson(needs.list-packages.outputs.matrix) }}

    permissions:
      id-token: write

    steps:
      - uses: awalsh128/cache-apt-pkgs-action@latest
        with:
          version: 1.0
          packages: build-essential libcairo2-dev libpango1.0-dev libjpeg-dev libgif-dev librsvg2-dev

      - name: Checkout
        uses: actions/checkout@v4
      - name: Install Node.js
        uses: actions/setup-node@v4
        with:
          registry-url: 'https://registry.npmjs.org'

      - uses: pnpm/action-setup@v4
        name: Install pnpm
        id: pnpm-install
        with:
          run_install: true
          version: 8

      - name: Get pnpm store directory
        id: pnpm-cache
        shell: bash
        run: |
          echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT

      - uses: actions/cache@v4
        name: Setup pnpm cache
        with:
          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
          restore-keys: |
            ${{ runner.os }}-pnpm-store-

      - name: Install dependencies
        run: pnpm install
        shell: bash

      - name: Compare npm with local (versions)
        uses: rbatty19/compare-npm-versions-ci@master
        id: package_version
        continue-on-error: true
        with:
          path: ${{ matrix.package.path }}
          npm_package_name: ${{ matrix.package.name }}

      - name: build dependencies
        run: pnpm -F ${{ matrix.package.name }}... build
        working-directory: ${{ matrix.package.path }}

      - name: publish to NPM
        run: |
          npm config set //registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}
          pnpm publish --filter ${{ matrix.package.name }} --no-git-checks
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
        working-directory: ${{ matrix.package.path }}
        if: steps.package_version.outputs.npm_is_greater != 'true'

#      - name: publish to GPR
#        run: |
#          npx npe name @${{ github.repository_owner }}/${{ matrix.package.name }}
#
#          npm config set @${{ github.repository_owner }}:registry=https://npm.pkg.github.com
#          npm config set //https://npm.pkg.github.com:_authToken=${NODE_AUTH_TOKEN}
#          npm config set registry https://npm.pkg.github.com
#          npm config set scope ${{ github.repository_owner }}
#
#          pnpm publish --filter @${{ github.repository_owner }}/${{ matrix.package.name }} --no-git-checks
#        env:
#          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
#        working-directory: ${{ matrix.package.path }}
#        if: steps.package_version.outputs.npm_is_greater != 'true'