Bump the github-actions group with 5 updates (#7077) #3489
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: pxt-buildpush | |
| on: | |
| push: | |
| branches: | |
| - '**' # Run workflow when any branch is updated | |
| tags: | |
| - '*' # Run workflow when any new tag is pushed | |
| pull_request: | |
| branches: | |
| - '**' # Run workflow for pull requests targeting any branch | |
| merge_group: | |
| branches: | |
| - '**' # Run workflow for merge queue checks targeting any branch | |
| types: | |
| - checks_requested | |
| permissions: | |
| contents: write | |
| id-token: write # Required for OIDC | |
| jobs: | |
| filter-vtags: | |
| uses: ./.github/workflows/is-vtag.yml | |
| tag-bump-commit: | |
| uses: ./.github/workflows/tag-bump-commit.yml | |
| needs: filter-vtags | |
| if: fromJSON(needs.filter-vtags.outputs.is_vtag || 'false') == false | |
| buildpush: | |
| name: buildpush | |
| runs-on: ubuntu-latest | |
| needs: tag-bump-commit | |
| if: always() && fromJSON(needs.tag-bump-commit.outputs.did_tag || 'false') == false | |
| steps: | |
| - uses: actions/checkout@main | |
| with: | |
| fetch-depth: 0 | |
| fetch-tags: true | |
| - name: Use Node.js | |
| uses: actions/setup-node@main | |
| with: | |
| node-version: 22.x | |
| - name: Update npm | |
| run: npm install -g npm@11 | |
| - name: npm install | |
| run: | | |
| sudo apt-get install xvfb | |
| sudo npm install -g pxt | |
| npm install | |
| - name: pxt ci (without publish capability) | |
| run: | | |
| pxt ci | |
| env: | |
| CHROME_BIN: chromium-browser | |
| DISPLAY: :99.0 | |
| CI: true | |
| buildvtag: | |
| # This job is a duplicate of pxt-buildvtag.yml's workflow | |
| name: buildvtag | |
| runs-on: ubuntu-latest | |
| needs: tag-bump-commit | |
| if: always() && fromJSON(needs.tag-bump-commit.outputs.did_tag || 'false') == true | |
| steps: | |
| - uses: actions/checkout@main | |
| with: | |
| fetch-depth: 0 | |
| fetch-tags: true | |
| - name: Use Node.js | |
| uses: actions/setup-node@main | |
| with: | |
| node-version: 22.x | |
| - name: Update npm | |
| run: npm install -g npm@11 | |
| - name: npm install | |
| run: | | |
| sudo apt-get install xvfb | |
| sudo npm install -g pxt | |
| npm install | |
| - name: pxt ci (with publish capability) | |
| run: | | |
| pxt ci --publish | |
| env: | |
| CROWDIN_KEY: ${{ secrets.CROWDIN_KEY }} | |
| PXT_ACCESS_TOKEN: ${{ secrets.PXT_ACCESS_TOKEN }} | |
| NPM_PUBLISH: true | |
| CHROME_BIN: chromium-browser | |
| DISPLAY: :99.0 | |
| CI: true | |
| PXT_SKIP_GIT_COMMIT: true | |
| - name: Clone release repo | |
| uses: actions/checkout@main | |
| with: | |
| repository: ${{ secrets.BUILT_REPO_NAME }} | |
| path: tmp/releases/release | |
| fetch-depth: 3 | |
| fetch-tags: true | |
| ssh-key: ${{ secrets.BUILT_REPO_DEPLOY_KEY }} | |
| - name: Read release info | |
| id: release_info | |
| run: | | |
| tag=$(cat tmp/releases/release.json | jq -r '.tag') | |
| url=$(cat tmp/releases/release.json | jq -r '.url') | |
| echo "tag=$tag" >> "$GITHUB_OUTPUT" | |
| echo "url=$url" >> "$GITHUB_OUTPUT" | |
| - name: Push artifacts to release repo | |
| run: | | |
| cp -a tmp/releases/built/. tmp/releases/release | |
| cd tmp/releases/release | |
| git config user.name "github-actions" | |
| git config user.email "github-actions@users.noreply.github.com" | |
| git add . | |
| git commit -m "Release ${{steps.release_info.outputs.tag}} from ${{steps.release_info.outputs.url}}" | |
| git tag ${{steps.release_info.outputs.tag}} | |
| git push | |
| git push --tags |