bump tooling and workflows

Author: SteveLLamb

.github/workflows/main.yml

@@ -6,77 +6,14 @@ on:
   release:
     types: [published]
 
-env:
-  AWS_REGION: us-east-1
-  AWS_S3_BUCKET: html-doc-pub
-  AWS_ROLE: arn:aws:iam::189079736792:role/gh-actions-html-pub
-  CANONICAL_LINK_PREFIX: https://doc.smpte-doc.org/
-
 jobs:
   build:
-    runs-on: ubuntu-latest
-    if: >
-      github.repository_owner	== 'SMPTE' && (
-      (github.event_name == 'push' && github.ref == 'refs/heads/main')
-      || github.event_name == 'pull_request'
-      || github.event_name == 'release'
-      )
-    # These permissions are needed to interact with GitHub's OIDC Token endpoint.
     permissions:
       id-token: write
       contents: write
       pull-requests: write
-
-    steps:
-
-      - name: Checkout repo
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-          submodules: true
-
-      - name: Set repository name
-        run: echo "REPOSITORY_NAME=${GITHUB_REPOSITORY#*/}" >> $GITHUB_ENV
-
-      - name: Check out all branches with the exception of the current branch
-        run: CUR_BRANCH=$(git rev-parse --abbrev-ref HEAD); for i in `git branch -a | grep remote | grep -v "remotes/pull" | grep -v HEAD | grep -v ${CUR_BRANCH}`; do git branch --track ${i#remotes/origin/} $i; done
-
-      - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v1-node16
-        with:
-          role-to-assume: ${{ env.AWS_ROLE }}
-          aws-region: ${{ env.AWS_REGION }}
-
-      - name: Build and deploy document (local)
-        uses: ./tooling/workflows
-        if: github.repository != 'SMPTE/html-pub'
-        with:
-          AWS_S3_REGION: ${{env.AWS_REGION}}
-          AWS_S3_BUCKET: 	${{env.AWS_S3_BUCKET}}
-          AWS_S3_KEY_PREFIX: "${{env.REPOSITORY_NAME}}/"
-          CANONICAL_LINK_PREFIX: ${{env.CANONICAL_LINK_PREFIX}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-          PUBLIC_REPO_PAT: ${{secrets.PUBLIC_REPO_PAT}}
-
-      - name: Build and deploy document (HTML Pub repo)
-        uses: ./workflows
-        if: github.repository == 'SMPTE/html-pub'
-        with:
-          AWS_S3_REGION: ${{env.AWS_REGION}}
-          AWS_S3_BUCKET: 	${{env.AWS_S3_BUCKET}}
-          AWS_S3_KEY_PREFIX: "${{env.REPOSITORY_NAME}}/"
-          CANONICAL_LINK_PREFIX: ${{env.CANONICAL_LINK_PREFIX}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-          PUBLIC_REPO_PAT: ${{secrets.PUBLIC_REPO_PAT}}
-
-      - name: Notify template repo to update submodule
-        if: github.event_name == 'release' && github.repository == 'SMPTE/html-pub'
-        env:
-          GH_TOKEN: ${{ secrets.TEMPLATE_REPO_PAT }}
-          TAG_NAME: ${{ github.event.release.tag_name }}
-        run: |
-          gh api repos/SMPTE/html-pub-template/dispatches \
-            --method POST \
-            --field event_type=tooling-release \
-            --field "client_payload[tag]=${TAG_NAME}" \
-            --field "client_payload[sha]=${GITHUB_SHA}"
+    # Central build pipeline lives in html-pub. The build/validation code still
+    # comes from this repo's `tooling` submodule, pinned by its SHA. Bump the
+    # @ref to move to a new pipeline version.
+    uses: SMPTE/html-pub/.github/workflows/build-reusable.yml@main
+    secrets: inherit