ci.yml

name: 🤹‍♂️ Continuous Integration
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:
env:
  SCOPRE_OWNER: '@pungrumpy'
jobs:
  security:
    name: 🔒 Security
    uses: ./.github/workflows/security.yml
  codeql:
    needs: [security]
    name: 🫸 CodeQL
    uses: ./.github/workflows/codeql.yml
  lint:
    needs: [codeql]
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest]
        node-version: [20, 21]
    name: ⚖️ Lint
    runs-on: ${{ matrix.os }}
    steps:
      - name: 🛫 Checkout Code
        uses: actions/checkout@v4
      - name: 📦 Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          registry-url: https://registry.npmjs.org/
          scope: ${{ env.SCOPRE_OWNER }}
      - name: 🍞 Setup Bun
        uses: oven-sh/setup-bun@v1
      - name: 🌵 Cache bun
        uses: actions/cache@v3
        id: cache-bun
        with:
          path: ~/.bun
          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
          restore-keys: |
            ${{ runner.os }}-bun-
      - name: 🔽 Install Dependencies
        run: bun install
      - name: ⚖️ Lint
        run: bun lint
  test:
    needs: [lint]
    strategy:
      fail-fast: false
      matrix:
        # os: [ubuntu-latest, macos-latest, windows-latest]
        os: [ubuntu-latest, macos-latest]
        node-version: [21]
    name: 🧪 Test
    runs-on: ${{ matrix.os }}
    steps:
      - name: 🛫 Checkout Code
        uses: actions/checkout@v4
      - name: 📦 Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          registry-url: https://registry.npmjs.org/
          scope: ${{ env.SCOPRE_OWNER }}
      - name: 🍞 Setup Bun
        uses: oven-sh/setup-bun@v1
      - name: 🌵 Cache bun
        uses: actions/cache@v3
        id: cache-bun
        with:
          path: ~/.bun
          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
          restore-keys: |
            ${{ runner.os }}-bun-
      - name: 🔽 Install Dependencies
        run: bun install
      - name: 🧪 Test
        # run: bun test --timeout 5000 --coverage --update-snapshots
        run: bun run test:ci
  release:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest]
        node-version: [21]
    if: ${{ github.ref == 'refs/heads/main' }} && !contains(github.event.head_commit.message, '[skip ci]')
    name: 🚀 Release
    permissions:
      contents: write
      pull-requests: write
    runs-on: ${{ matrix.os }}
    needs: [test]
    steps:
      - name: 💤 Automated Release
        uses: google-github-actions/release-please-action@v3
        id: release
        with:
          release-type: node
          token: ${{ secrets.GITHUB_TOKEN }}
          bump-minor-pre-major: true
      - name: 🔔 Checkout
        uses: actions/checkout@v4
      - name: 📦 Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ matrix.node-version }}
          registry-url: https://registry.npmjs.org/
          scope: ${{ env.SCOPRE_OWNER }}
      - name: 🍞 Setup Bun
        uses: oven-sh/setup-bun@v1
      - name: 🌵 Cache bun
        uses: actions/cache@v3
        id: cache-bun
        with:
          path: ~/.bun
          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
          restore-keys: |
            ${{ runner.os }}-bun-
      - name: 🔽 Install Dependencies
        run: bun install
      - name: 🏷️ Tag stable versions
        if: ${{ steps.release.outputs.release_created }}
        run: |
          git config user.name github-actions[bot]
          git config user.email github-actions[bot]@users.noreply.github.com
          git remote add gh-token "https://${{ secrets.GITHUB_TOKEN }}@github.com/google-github-actions/release-please-action.git"
          git tag -d stable || true
          git push origin :stable || true
          git tag -a stable -m "chore: release stable version ${{ steps.release.outputs.tag_name }}"
          git push origin stable
      - name: 📦 Publish
        if: ${{ steps.release.outputs.release_created }}
        run: bun run publish