ci.yaml

# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

name: Continuous Integration

on:
  push:
    branches:
      - "**"

permissions:
  contents: write # we need to read secrets

jobs:
  test:
    name: Build and Test
    runs-on: ubuntu-22.04

    steps:
      - uses: actions/checkout@v4
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Install dependencies
        run: yarn install

      - name: Lint code
        run: yarn lint

      - name: Unit test
        run: yarn jest --coverage


  release:
    name: Release
    needs: test
    permissions: write-all
    runs-on: ubuntu-22.04
    steps:
      - name: Obtain App Token
        uses: actions/create-github-app-token@v1.10.3
        id: get_token
        with:
          app-id: ${{ vars.STAFFBASE_ACTIONS_APP_ID }}
          private-key: ${{ secrets.STAFFBASE_ACTIONS_PRIVATE_KEY }}

      - uses: actions/checkout@v4
        with:
          persist-credentials: false
          ref: ${{ github.head_ref }}

      - uses: actions/setup-node@v4
        with:
          node-version: 20.x
          registry-url: 'https://npm.pkg.github.com'
          scope: '@staffbase'

      - name: Install dependencies
        run: yarn install --frozen-lockfile

      - name: Build
        run: yarn build

      - name: Release
        uses: cycjimmy/semantic-release-action@v4
        id: semantic
        with:
          semantic_version: 23.0.0
          extra_plugins: |
            conventional-changelog-conventionalcommits
        env:
          NODE_AUTH_TOKEN: ${{ secrets.STAFFBOT_NPM_WRITE }}
          GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}

      - uses: actions/setup-node@v4
        if: steps.semantic.outputs.new_release_published == 'true'
        with:
          node-version: 20.x
          cache: 'npm'
          registry-url: 'https://registry.npmjs.org'
          scope: '@staffbase'

      - name: Publish to NPM
        if: steps.semantic.outputs.new_release_published == 'true' && github.ref != 'refs/heads/alpha'
        run: |
          npm publish --registry=https://registry.npmjs.org --access public
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}