push.yaml

name: Push

on:
  push:
    branches:
      # since we use multi-semantic-release, which assumes that all plugins in the 1.1.x branch
      # are versioned < 1.2, we can only release from main branch. See RHIDP-1720 for more info
      - main
concurrency:
  group: push
  cancel-in-progress: true

jobs:
  test:
    name: Test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4

      - name: Test
        uses: ./.github/actions/test

  release:
    name: Release
    needs:
      - test
    runs-on: ubuntu-latest
    steps:
      - name: Generate token
        id: generate-token
        uses: actions/create-github-app-token@7bfa3a4717ef143a604ee0a99d859b8886a96d00 # v1.9.3
        with:
          app-id: ${{ vars.JANUS_IDP_GITHUB_APP_ID }}
          private-key: ${{ secrets.JANUS_IDP_GITHUB_APP_PRIVATE_KEY }}

      - name: Checkout
        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
        with:
          # don't persist the GITHUB_TOKEN
          # so that semantic-release can use use the generated token
          persist-credentials: false

      - name: Build all packages
        uses: ./.github/actions/build

      - name: Setup Node.js
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
        with:
          node-version-file: '.nvmrc'
          registry-url: 'https://registry.npmjs.org'

      - name: Release via semantic-release
        run: |
          npm config set workspaces-update false
          yarn release --ignore-private-packages
        env:
          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_OPTIONS: '--max-old-space-size=8192'