release.yml

name: release

on:
  push:
    tags:
      - v*

jobs:
  check_branch:
    runs-on: ubuntu-latest
    outputs:
      should_build: ${{ steps.permitted.outputs.result }}

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Fetch remote branches
        run: |
          git fetch origin --depth=1

      - name: Check if on permitted branch
        id: permitted
        run: |
          result=
          if git branch -a --contains $GITHUB_SHA | grep -q 'remotes/origin/master$'; then
            result=true
          elif git branch -a --contains $GITHUB_SHA | grep -q 'remotes/origin/.*-release$'; then
            result=true
          fi
          echo "result=${result}" >> "$GITHUB_OUTPUT"

  release:
    runs-on: ubuntu-22.04
    needs: check_branch
    permissions:
      contents: write

    if: ${{ github.repository_owner == 'visgl' && needs.check_branch.outputs.should_build }}

    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      NPM_ACCESS_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: actions/setup-node@v4
        with:
          node-version: '24'

      - name: Enable Corepack
        run: corepack enable yarn

      - name: Install dependencies
        run: yarn install --immutable

      - name: Build packages
        run: yarn build
      
      - name: Run tests
        run: |
          yarn lint
          yarn test

      - name: Login to NPM
        run: npm config set "//registry.npmjs.org/:_authToken=${NPM_ACCESS_TOKEN}"

      - name: Verify NPM token
        run: |
          npm ping
          npm whoami
          node - <<'NODE'
          const fs = require('fs');
          const path = require('path');

          const packageDirs = ['modules', 'dev'].flatMap((root) =>
            fs.existsSync(root)
              ? fs
                  .readdirSync(root, {withFileTypes: true})
                  .filter((entry) => entry.isDirectory())
                  .map((entry) => path.join(root, entry.name))
              : []
          );

          const packages = packageDirs
            .map((directory) => path.join(directory, 'package.json'))
            .filter((filename) => fs.existsSync(filename))
            .map((filename) => JSON.parse(fs.readFileSync(filename, 'utf8')))
            .filter((pkg) => pkg.name?.startsWith('@deck.gl-community/') && !pkg.private)
            .map((pkg) => pkg.name)
            .sort();

          console.log(`NPM token is valid. Publishing ${packages.length} public packages:`);
          for (const name of packages) {
            console.log(`- ${name}`);
          }
          NODE

      - name: Publish to NPM
        run: npx ocular-publish from-git