release.yml

---
name: 🚀 Release

on: # yamllint disable-line rule:truthy
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions: {}

jobs:
  check-branches:
    name: Check branches
    runs-on: ubuntu-latest
    steps:
      - name: Check branch
        run: |
          if [[ "${{ github.ref_name }}" != "${{ github.event.repository.default_branch }}" ]]; then
            echo "This action can only be run on the ${{ github.event.repository.default_branch }} branch"
            exit 1
          fi
          echo "Branch check passed. Proceeding with the release."

  ci:
    needs: check-branches
    name: Continuous Integration
    uses: ./.github/workflows/__shared-ci.yml
    permissions:
      actions: read
      contents: read
      security-events: write
      statuses: write
    secrets: inherit

  release:
    needs: ci
    name: Release
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      tag: ${{ steps.create-release.outputs.tag }}
    steps:
      - id: create-release
        uses: hoverkraft-tech/ci-github-publish/actions/release/create@ed354ada70b9f518c2bb663e18a80041c2cf5156 # 0.27.1

  release-chart:
    name: "Release Helm Chart"
    needs: release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
      pull-requests: write
    steps:
      - id: release
        uses: hoverkraft-tech/ci-github-container/actions/helm/release-chart@f8255a6a37eb141fa331527f5aed9b9e1d598c77 # 0.38.0
        with:
          chart: codespace-like
          path: ./codespace-like
          tag: ${{ needs.release.outputs.tag }}
          oci-registry: ghcr.io
          oci-registry-password: ${{ secrets.GITHUB_TOKEN }}
          update-tag-paths: .version

      - uses: hoverkraft-tech/ci-github.qkg1.topmon/actions/create-and-merge-pull-request@2334d395217f9811699dbd4ace9d8559e4d99e0d # 0.37.3
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          branch: release-chart-${{ needs.release.outputs.tag }}
          title: "ci: release chart ${{ needs.release.outputs.tag }}"
          body: Release app and chart version ${{ needs.release.outputs.tag }}
          commit-message: |
            ci: release chart ${{ needs.release.outputs.tag }}

            [skip ci]