main.yml

name: Validate changes
on: push

jobs:
    check:
        name: 'Check, Lint, Test'
        runs-on: ubuntu-latest
        steps:
            - uses: actions/checkout@v3
            - uses: actions/setup-node@v3
              with:
                  node-version: 18
            - run: |
                  yarn --frozen-lockfile --ignore-engines --ignore-optional --non-interactive --silent --ignore-scripts --production=false
                  yarn peer
            - name: TypeScript Check
              run: yarn typecheck
            - name: Lint
              run: yarn lint
            - name: Test
              run: yarn test

    release:
        name: Release
        runs-on: ubuntu-latest
        if: github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
        needs: check
        steps:
            - name: Checkout code
              uses: actions/checkout@v3
              with:
                  persist-credentials: false
                  fetch-depth: 0
            
            - uses: actions/setup-node@v3
              with:
                  node-version: 18

            - run: yarn install --frozen-lockfile

            - uses: webfactory/ssh-agent@v0.5.4
              with:
                  ssh-private-key: ${{ secrets.SSH_RELEASE_KEY }}
            
            - name: Build
              run: yarn build

            - name: Release
              run: |
                  npx --package=@auto-it/git-tag --package=@auto-it/omit-release-notes --package=auto -- auto shipit
              env:
                  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                  NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }}