ci.yaml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency: ${{ github.ref }}-ci

jobs:
  ci:
    outputs:
      shouldCancel: ${{ steps.batchRuns.outputs.shouldCancel }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: yarn

      - run: yarn --frozen-lockfile --ignore-scripts

      - run: yarn syncpack:check
      - run: yarn format:check
      - run: yarn beachball check

      - run: yarn build
      - run: yarn lint
      - run: yarn test
      - run: yarn package

      - name: e2e - install-beachball
        uses: ./install-beachball

      - name: e2e - check-for-modified-files
        uses: ./check-for-modified-files

      - name: e2e - batch-runs
        uses: ./batch-runs
        id: batchRuns
        with:
          mode: output
          token: ${{ github.token }}

      - name: e2e - batch-runs result
        uses: actions/github-script@v7
        if: ${{ steps.batchRuns.outputs.shouldCancel != 'no' }}
        with:
          script: |
            const shouldCancel = '${{ steps.batchRuns.outputs.shouldCancel }}';
            if (shouldCancel === 'yes' && process.env.GITHUB_REF_NAME === 'main') {
              core.info('Newer run is pending for main');
            } else {
              core.setFailed(`batch-runs unexpectedly returned "${shouldCancel}"`);
            }

      # Note: this is not actually used here to determine if a release is needed
      - name: e2e - should-release
        uses: ./should-release
        id: shouldRelease
        with:
          mode: output
          token: ${{ github.token }}
          batch: true

      - name: e2e - should-release result
        uses: actions/github-script@v7
        with:
          script: |
            const shouldRelease = '${{ steps.shouldRelease.outputs.shouldRelease }}';
            if (shouldRelease !== 'yes' && shouldRelease !== 'no') {
              core.setFailed(`should-release returned "${shouldRelease}" instead of "yes" or "no"`);
            } else {
              core.info(`should-release returned shouldRelease: "${shouldRelease}"`);
            }

  # Run the release in a separate job with release environment access.
  # This approach requires re-running the build but skips the tests.
  release:
    needs: ci
    if: ${{ github.ref == 'refs/heads/main' && needs.ci.outputs.shouldCancel == 'no' }}

    runs-on: ubuntu-latest

    # This environment contains secrets needed for releasing
    environment: release

    permissions:
      contents: write

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          persist-credentials: false

      - uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: yarn

      - run: yarn --frozen-lockfile --ignore-scripts

      - run: yarn build
      - run: yarn package

      # Verify that no newer runs were queued since the check in the previous job
      - uses: ./batch-runs
        id: batchRuns
        with:
          mode: output
          token: ${{ github.token }}

      - name: Set git config
        run: |
          git config user.name "Elizabeth Craig"
          git config user.email "elcraig@microsoft.com"
          git remote set-url origin "https://$REPO_PAT@github.com/$GITHUB_REPOSITORY"
        env:
          REPO_PAT: ${{ secrets.REPO_PAT }}

      - name: Publish common package to npm
        if: ${{ steps.batchRuns.outputs.shouldCancel == 'no' }}
        run: |
          yarn beachball publish -b origin/main -y -n "$NPM_TOKEN"
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Release actions
        if: ${{ steps.batchRuns.outputs.shouldCancel == 'no' }}
        uses: int128/release-typescript-action@v1
        with:
          major-version: 2
          token: ${{ github.token }}