release.yaml

---
name: release
on:
  workflow_dispatch:
    inputs:
      publish_to:
        description: 'Where to publish the release to'
        required: true
        default: '"nuget", "PSGallery", "GitHub"'
        type: string

permissions: {}

jobs:
  release:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      # Step 1: Generate a short-lived token from the GitHub App
      - name: generate-app-token
        id: app-token
        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3
        with:
          app-id: ${{ secrets.BROWNSERVE_CI_APP_ID }}
          private-key: ${{ secrets.BROWNSERVE_CI_APP_PRIVATE_KEY }}
      # Step 2: Checkout the repo
      - name: checkout-module
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          path: PSSourceControl
      # Step 3: Install Mono (required to run NuGet.exe on Linux)
      - name: install-mono
        run: sudo apt-get install -y mono-complete
      # Step 4: Run the build script
      - name: run-build-script
        shell: pwsh
        env:
          GitHubToken: ${{ steps.app-token.outputs.token }}
          NugetFeedAPIKey: ${{ secrets.NUGET_API_KEY }}
          PSGalleryAPIKey: ${{ secrets.POWERSHELL_GALLERY_API_KEY }}
        run: |
            $Params = @{
              BranchName = $env:GITHUB_REF
              GitHubRepoName = 'PSSourceControl'
              Build = 'Release'
              GitHubReleaseToken = $env:GitHubToken
              NugetFeedApiKey = $env:NugetFeedAPIKey
              PSGalleryAPIKey = $env:PSGalleryAPIKey
              PublishTo = ${{ inputs.publish_to }}
              Verbose = $true
            }
            ./PSSourceControl/.build/build.ps1 @Params
      # Step 5: Push a notification to Slack
      - name: notify-slack
        shell: pwsh
        if: ${{ always() }}
        env:
          BUILD_NOTIFICATION_WEBHOOK: ${{ secrets.SLACK_WEBHOOK_BUILD }}
          BUILD_BRANCH: ${{ github.ref }}
        run: |
            ./PSSourceControl/.build/_init.ps1
            Send-BuildNotification `
              -BuildName ${{ github.job }} `
              -BuildStatus ${{ job.status }} `
              -Webhook $env:BUILD_NOTIFICATION_WEBHOOK `
              -RepoBranch $env:BUILD_BRANCH `
              -RepoName $global:BrownserveRepoName

  deploy-docs:
    name: Deploy documentation
    needs: [release]
    runs-on: ubuntu-latest
    permissions:
      contents: write  # needed for gh-deploy to push to gh-pages branch
    steps:
      # Step 1: Checkout the repo
      - name: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
      # Step 2: Set up Python
      - name: setup-python
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v6
        with:
          python-version: '3.x'
      # Step 3: Install MkDocs and build/deploy the site
      - name: deploy-docs
        run: |
          pip install -r requirements.txt
          mkdocs gh-deploy --force