release.yml

name: Build and push Docker images

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write
  packages: write
  id-token: write

jobs:
  goreleaser:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '>=1.25'

      - name: Set up env vars
        run: |
          FERRET_VERSION="$(sh scripts/versions.sh ferret)"
          test -n "$FERRET_VERSION"
          echo "FERRET_VERSION=$FERRET_VERSION" >> "$GITHUB_ENV"

      - name: Verify release version metadata
        run: |
          WORKER_VERSION="${GITHUB_REF_NAME#v}"
          go build -o /tmp/worker \
            -ldflags "-s -w -X main.version=${WORKER_VERSION} -X main.ferretVersion=${FERRET_VERSION}" \
            ./main.go

          VERSION_OUTPUT="$(/tmp/worker -version)"
          echo "$VERSION_OUTPUT"
          echo "$VERSION_OUTPUT" | grep -F "Ferret: $FERRET_VERSION"

      - name: Login to DockerHub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Login to GitHub Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - id: 'auth'
        name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v3
        with:
          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT_EMAIL }}

      - name: Set up Google Cloud SDK
        uses: google-github-actions/setup-gcloud@v3

      - name: Configure Docker for Artifact Registry
        run: gcloud auth configure-docker us-east1-docker.pkg.dev --quiet

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: "~> v2"
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  notify-website:
    name: Notify website
    needs: goreleaser
    if: ${{ needs.goreleaser.result == 'success' && startsWith(github.ref_name, 'v2.') }}
    uses: MontFerret/.github/.github/workflows/notify-website-release.yml@main
    with:
      tag: ${{ github.ref_name }}
      release-url: ${{ format('https://github.com/{0}/releases/tag/{1}', github.repository, github.ref_name) }}
      commit-sha: ${{ github.sha }}
    secrets:
      FERRET_RELEASE_APP_CLIENT_ID: ${{ secrets.FERRET_RELEASE_APP_CLIENT_ID }}
      FERRET_RELEASE_APP_PRIVATE_KEY: ${{ secrets.FERRET_RELEASE_APP_PRIVATE_KEY }}