release.yml

name: Release

on:
  push:
    branches:
      - main

env:
  CARGO_TERM_COLOR: always

jobs:
  release-please:
    name: Release Please
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    outputs:
      releases_created: ${{ steps.release.outputs.releases_created }}
      sdocx-cli--release_created: ${{ steps.release.outputs['crates/sdocx-cli--release_created'] }}
      sdocx-cli--tag_name: ${{ steps.release.outputs['crates/sdocx-cli--tag_name'] }}
      sdocx-wasm--release_created: ${{ steps.release.outputs['crates/sdocx-wasm--release_created'] }}
    steps:
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          config-file: release-please-config.json
          manifest-file: .release-please-manifest.json

  build:
    name: Build (${{ matrix.artifact }})
    needs: [release-please]
    if: needs.release-please.outputs.releases_created == 'true'
    runs-on: ${{ matrix.os }}
    permissions:
      id-token: write
      attestations: write
    strategy:
      matrix:
        include:
          - os: ubuntu-latest
            target: x86_64-unknown-linux-gnu
            artifact: sdocx-cli-x86_64-linux
            bin: sdocx-cli
          - os: macos-latest
            target: aarch64-apple-darwin
            artifact: sdocx-cli-aarch64-macos
            bin: sdocx-cli
          - os: windows-latest
            target: x86_64-pc-windows-msvc
            artifact: sdocx-cli-x86_64-windows.exe
            bin: sdocx-cli.exe
    steps:
      - uses: actions/checkout@v4
      - uses: actions-rust-lang/setup-rust-toolchain@v1
      - name: Build release binary
        run: cargo build --release

      - name: Rename binary
        shell: bash
        run: mv "target/release/${{ matrix.bin }}" "${{ matrix.artifact }}"

      - name: Attest provenance
        uses: actions/attest-build-provenance@v2
        with:
          subject-path: ${{ matrix.artifact }}

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: ${{ matrix.artifact }}
          path: ${{ matrix.artifact }}

  upload-release-assets:
    name: Upload Release Assets
    needs: [release-please, build]
    if: needs.release-please.outputs.sdocx-cli--release_created == 'true'
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: artifacts
          merge-multiple: true

      - name: Upload assets to release
        env:
          GH_TOKEN: ${{ github.token }}
        run: gh release upload "${{ needs.release-please.outputs.sdocx-cli--tag_name }}" artifacts/*

  publish:
    name: Publish to crates.io
    needs: [release-please]
    if: needs.release-please.outputs.releases_created == 'true'
    runs-on: ubuntu-latest
    environment: crates-io
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@v4
      - uses: actions-rust-lang/setup-rust-toolchain@v1
      - name: Authenticate with crates.io
        id: auth
        uses: rust-lang/crates-io-auth-action@v1
      - run: cargo publish -p sdocx
        env:
          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
      - run: cargo publish -p sdocx-cli
        env:
          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}

  npm:
    name: Publish to npm
    needs: [release-please]
    if: needs.release-please.outputs.sdocx-wasm--release_created == 'true'
    runs-on: ubuntu-latest
    environment: npm
    permissions:
      id-token: write
    steps:
      - uses: actions/checkout@v4
      - uses: actions-rust-lang/setup-rust-toolchain@v1
      - uses: actions/setup-node@v4
        with:
          node-version: 24
          registry-url: https://registry.npmjs.org
      - name: Install wasm-pack
        run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
      - name: Build WASM package
        run: wasm-pack build crates/sdocx-wasm --out-name sdocx
      - name: Set npm package name
        run: npm pkg set name="@twango/sdocx"
        working-directory: crates/sdocx-wasm/pkg
      - name: Publish to npm
        run: npm publish --provenance --access public
        working-directory: crates/sdocx-wasm/pkg

  docker:
    name: Docker
    needs: [release-please, build]
    if: needs.release-please.outputs.sdocx-cli--release_created == 'true'
    runs-on: ubuntu-latest
    environment: docker
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/twangodev/sdocx
          tags: |
            type=semver,pattern={{version}},value=${{ needs.release-please.outputs.sdocx-cli--tag_name }}
            type=semver,pattern={{major}}.{{minor}},value=${{ needs.release-please.outputs.sdocx-cli--tag_name }}
            type=raw,value=latest

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          push: true
          platforms: linux/amd64,linux/arm64
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}