release.yml

name: Release Pipeline

on:
  workflow_dispatch:
    inputs:
      mode:
        description: "Choose whether to create a new tagged release or deploy an existing tag"
        required: true
        type: choice
        default: release
        options:
          - release
          - deploy-existing-tag
      version:
        description: "Version without the v prefix (examples: 1.2.0, 1.2.0-rc.1)"
        required: true

permissions:
  contents: read
  pages: write
  id-token: write

concurrency:
  group: release-pages
  cancel-in-progress: false

jobs:
  validate:
    runs-on: ubuntu-latest
    outputs:
      tag_name: ${{ steps.meta.outputs.tag_name }}
      source_ref: ${{ steps.meta.outputs.source_ref }}
      is_prerelease: ${{ steps.meta.outputs.is_prerelease }}
      should_create_release: ${{ steps.meta.outputs.should_create_release }}
    steps:
      - name: Validate version format
        env:
          VERSION: ${{ inputs.version }}
        run: |
          python - <<'PY'
          import os, re, sys
          version = os.environ["VERSION"]
          pattern = r"\d+\.\d+\.\d+(?:-(?:alpha|beta|rc)\.\d+)?"
          if not re.fullmatch(pattern, version):
              print(f"Invalid version: {version}")
              print("Expected formats: 1.2.0, 1.2.0-alpha.1, 1.2.0-beta.1, 1.2.0-rc.1")
              sys.exit(1)
          PY

      - name: Restrict new releases to main
        if: inputs.mode == 'release'
        run: |
          if [[ "${{ github.ref_name }}" != "main" ]]; then
            echo "New releases must be dispatched from the main branch."
            exit 1
          fi

      - name: Checkout repository metadata
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Resolve release metadata
        id: meta
        env:
          MODE: ${{ inputs.mode }}
          VERSION: ${{ inputs.version }}
          DISPATCH_REF: ${{ github.ref_name }}
        run: |
          TAG_NAME="v${VERSION}"

          if [[ "$MODE" == "release" ]]; then
            if git ls-remote --exit-code --tags origin "refs/tags/${TAG_NAME}" >/dev/null 2>&1; then
              echo "Tag ${TAG_NAME} already exists on origin."
              exit 1
            fi
            SOURCE_REF="${GITHUB_SHA}"
            SHOULD_CREATE_RELEASE=true
          else
            if ! git ls-remote --exit-code --tags origin "refs/tags/${TAG_NAME}" >/dev/null 2>&1; then
              echo "Tag ${TAG_NAME} does not exist on origin."
              exit 1
            fi
            SOURCE_REF="${TAG_NAME}"
            SHOULD_CREATE_RELEASE=false
          fi

          if [[ "$VERSION" == *-* ]]; then
            IS_PRERELEASE=true
          else
            IS_PRERELEASE=false
          fi

          {
            echo "tag_name=${TAG_NAME}"
            echo "source_ref=${SOURCE_REF}"
            echo "is_prerelease=${IS_PRERELEASE}"
            echo "should_create_release=${SHOULD_CREATE_RELEASE}"
          } >> "$GITHUB_OUTPUT"

  build:
    runs-on: ubuntu-latest
    needs: validate
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ needs.validate.outputs.source_ref }}

      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - name: Set Eleventy path prefix
        run: |
          REPO_NAME="${GITHUB_REPOSITORY#*/}"
          if [[ "$REPO_NAME" == *.github.io ]]; then
            echo "ELEVENTY_PATH_PREFIX=/" >> "$GITHUB_ENV"
          else
            echo "ELEVENTY_PATH_PREFIX=/${REPO_NAME}/" >> "$GITHUB_ENV"
          fi

      - run: npm ci
      - run: npm run build:css
      - run: npx eleventy --pathprefix="$ELEVENTY_PATH_PREFIX"
      - run: npm run check

      - uses: actions/upload-pages-artifact@v3
        with:
          path: _site

  release:
    runs-on: ubuntu-latest
    needs: [validate, build]
    if: needs.validate.outputs.should_create_release == 'true'
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Create and push tag
        env:
          TAG_NAME: ${{ needs.validate.outputs.tag_name }}
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git fetch --tags origin
          git tag "$TAG_NAME" "$GITHUB_SHA"
          git push origin "$TAG_NAME"

      - name: Create GitHub release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ needs.validate.outputs.tag_name }}
          generate_release_notes: true
          prerelease: ${{ needs.validate.outputs.is_prerelease == 'true' }}

  deploy:
    runs-on: ubuntu-latest
    needs: [validate, build, release]
    if: |
      always() &&
      needs.build.result == 'success' &&
      (needs.release.result == 'success' || needs.release.result == 'skipped')
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    steps:
      - id: deployment
        uses: actions/deploy-pages@v4