computing-box/.gitea/workflows/release.yaml

name: Changelog + Release on main

on:
  push:
    branches: [ main ]
  workflow_dispatch:

jobs:
  changelog_and_release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout (full history + tags)
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Stop if this is the bot changelog/version commit
        shell: bash
        run: |
          set -e
          msg="$(git log -1 --pretty=%B)"
          echo "$msg" | tr -d '\r' | grep -qi "\[skip ci\]" && {
            echo "Skipping (bot commit with [skip ci])"
            exit 0
          } || true

      - name: Install git-cliff
        shell: bash
        run: |
          set -e
          GIT_CLIFF_VERSION="2.11.0"
          URL="https://github.com/orhun/git-cliff/releases/download/v${GIT_CLIFF_VERSION}/git-cliff-${GIT_CLIFF_VERSION}-x86_64-unknown-linux-gnu.tar.gz"
          curl -L "$URL" -o /tmp/git-cliff.tar.gz
          tar -xzf /tmp/git-cliff.tar.gz -C /tmp
          sudo install /tmp/git-cliff-*/git-cliff /usr/local/bin/git-cliff
          git-cliff --version

      - name: Prepare YY.MM.DD letter-suffix tag + release name
        shell: bash
        run: |
          set -e

          VERSION="$(date -u +'%y.%m.%d')"
          PREFIX="v${VERSION}."

          last_letter="$(
            git tag --list "${PREFIX}[a-z]" \
              | sed -E "s/^${PREFIX}([a-z])$/\1/" \
              | sort \
              | tail -n 1
          )"

          if [ -z "$last_letter" ]; then
            next_letter="a"
          else
            if [ "$last_letter" = "z" ]; then
              echo "❌ Already have v${VERSION}.z today. Refusing to create more than 26 releases/day."
              exit 1
            fi
            next_letter="$(printf "%b" "$(printf '\\%03o' "$(( $(printf '%d' "'$last_letter") + 1 ))")")"
          fi

          TAG="${PREFIX}${next_letter}"
          RELEASE_NAME="Computing:Box v${VERSION}.${next_letter}"

          origin_url="$(git remote get-url origin)"

          if echo "$origin_url" | grep -q "^git@"; then
            host="$(echo "$origin_url" | sed -E 's#git@([^:]+):.*#\1#')"
            path="$(echo "$origin_url" | sed -E 's#git@[^:]+:(.*)#\1#')"
            origin_url="https://$host/$path"
          fi

          base="$(echo "$origin_url" | sed -E 's#(https?://[^/]+)/.*#\1#')"
          repo_path="$(echo "$origin_url" | sed -E 's#https?://[^/]+/##')"
          repo_path="$(echo "$repo_path" | sed -E 's/\.git$//')"

          RELEASE_URL="${base}/${repo_path}/releases/tag/${TAG}"

          echo "TAG=$TAG" >> "$GITHUB_ENV"
          echo "RELEASE_NAME=$RELEASE_NAME" >> "$GITHUB_ENV"
          echo "ZIP_PATH=Computing:Box Website.zip" >> "$GITHUB_ENV"
          echo "RELEASE_URL=$RELEASE_URL" >> "$GITHUB_ENV"

          echo "Using tag: $TAG"
          echo "Release name: $RELEASE_NAME"
          echo "Release URL: $RELEASE_URL"

      - name: Find previous release tag
        shell: bash
        run: |
          set -e

          PREV_TAG="$(
            git tag --list 'v*' \
              | grep -E '^v[0-9]{2}\.[0-9]{2}\.[0-9]{2}[a-z]$' \
              | sort -V \
              | tail -n 1
          )"

          if [ -n "$PREV_TAG" ]; then
            echo "PREV_TAG=$PREV_TAG" >> "$GITHUB_ENV"
            echo "Previous release tag: $PREV_TAG"
          else
            echo "PREV_TAG=" >> "$GITHUB_ENV"
            echo "No previous release tag found."
          fi

      - name: Generate CHANGELOG.md from previous release to HEAD
        shell: bash
        run: |
          set -e

          if [ -n "${PREV_TAG}" ]; then
            echo "Generating changelog from ${PREV_TAG}..HEAD"
            git-cliff --config cliff.toml "${PREV_TAG}..HEAD" --output CHANGELOG.md
          else
            echo "Generating changelog from full history"
            git-cliff --config cliff.toml --output CHANGELOG.md
          fi

          test -s CHANGELOG.md
          echo "---- CHANGELOG.md ----"
          head -n 120 CHANGELOG.md
          echo "----------------------"

      - name: Commit and push CHANGELOG.md if changed (CHANGELOG_PAT)
        shell: bash
        env:
          CHANGELOG_PAT: ${{ secrets.CHANGELOG_PAT }}
        run: |
          set -e

          if git diff --quiet -- CHANGELOG.md; then
            echo "No changelog changes."
          else
            git config user.name "changelog-bot"
            git config user.email "changelog-bot@users.noreply.local"

            git add CHANGELOG.md
            git commit -m "docs(changelog): update changelog [skip ci]"

            origin_url="$(git remote get-url origin)"

            if echo "$origin_url" | grep -q "^git@"; then
              host="$(echo "$origin_url" | sed -E 's#git@([^:]+):.*#\1#')"
              path="$(echo "$origin_url" | sed -E 's#git@[^:]+:(.*)#\1#')"
              origin_url="https://$host/$path"
            fi

            authed_url="$(echo "$origin_url" | sed -E "s#^https://#https://oauth2:${CHANGELOG_PAT}@#")"
            git push "$authed_url" HEAD:main
          fi

      - name: Prepare release notes
        shell: bash
        run: |
          set -e
          cp CHANGELOG.md RELEASE_NOTES.md
          test -s RELEASE_NOTES.md
          echo "---- RELEASE_NOTES.md ----"
          head -n 120 RELEASE_NOTES.md
          echo "--------------------------"

      - name: Derive semver package version from tag
        shell: bash
        run: |
          set -e

          PACKAGE_VERSION="$(echo "$TAG" | sed -E 's/^v([0-9]{2})\.0?([0-9]{1,2})\.0?([0-9]{1,2})([a-z])$/\1.\2.\3-\4/')"

          if [ -z "$PACKAGE_VERSION" ]; then
            echo "❌ Failed to derive PACKAGE_VERSION from TAG=$TAG"
            exit 1
          fi

          echo "PACKAGE_VERSION=$PACKAGE_VERSION" >> "$GITHUB_ENV"
          echo "Using package version: $PACKAGE_VERSION"

      - name: Generate version file for Astro footer
        shell: bash
        run: |
          set -e
          mkdir -p src/generated
          cat > src/generated/version.json <<EOF
          {
            "version": "${TAG}",
            "url": "${RELEASE_URL}"
          }
          EOF

          echo "Generated src/generated/version.json"
          cat src/generated/version.json

      - name: Set up Node
        uses: actions/setup-node@v6
        with:
          node-version: 22.12.0
          cache: npm

      - name: Check Node version
        shell: bash
        run: |
          node -v
          npm -v

      - name: Install dependencies
        shell: bash
        run: |
          set -e
          npm ci

      - name: Update package.json and package-lock.json version
        shell: bash
        run: |
          set -e
          npm version "$PACKAGE_VERSION" --no-git-tag-version

          echo "package.json version:"
          node -p "require('./package.json').version"

          echo "package-lock.json version:"
          node -p "require('./package-lock.json').version"

      - name: Commit and push version bump (CHANGELOG_PAT)
        shell: bash
        env:
          CHANGELOG_PAT: ${{ secrets.CHANGELOG_PAT }}
        run: |
          set -e

          if git diff --quiet -- package.json package-lock.json; then
            echo "No version changes to commit."
          else
            git config user.name "release-bot"
            git config user.email "release-bot@users.noreply.local"

            git add package.json package-lock.json
            git commit -m "chore(release): bump version to ${PACKAGE_VERSION} [skip ci]"

            origin_url="$(git remote get-url origin)"

            if echo "$origin_url" | grep -q "^git@"; then
              host="$(echo "$origin_url" | sed -E 's#git@([^:]+):.*#\1#')"
              path="$(echo "$origin_url" | sed -E 's#git@[^:]+:(.*)#\1#')"
              origin_url="https://$host/$path"
            fi

            authed_url="$(echo "$origin_url" | sed -E "s#^https://#https://oauth2:${CHANGELOG_PAT}@#")"
            git push "$authed_url" HEAD:main
          fi

      - name: Build Astro site
        shell: bash
        run: |
          set -e
          npm run build
          test -d dist

      - name: Create export zip (Computing:Box Website.zip)
        shell: bash
        run: |
          set -e
          if [ ! -d "dist" ]; then
            echo "❌ dist/ folder not found in repo root"
            ls -la
            exit 1
          fi

          rm -f "Computing:Box Website.zip"
          (cd dist && zip -r "../Computing:Box Website.zip" .)
          test -s "Computing:Box Website.zip"
          ls -lh "Computing:Box Website.zip"

      - name: Create and push tag (CHANGELOG_PAT)
        shell: bash
        env:
          CHANGELOG_PAT: ${{ secrets.CHANGELOG_PAT }}
        run: |
          set -e

          git tag -f "$TAG"

          origin_url="$(git remote get-url origin)"

          if echo "$origin_url" | grep -q "^git@"; then
            host="$(echo "$origin_url" | sed -E 's#git@([^:]+):.*#\1#')"
            path="$(echo "$origin_url" | sed -E 's#git@[^:]+:(.*)#\1#')"
            origin_url="https://$host/$path"
          fi

          authed_url="$(echo "$origin_url" | sed -E "s#^https://#https://oauth2:${CHANGELOG_PAT}@#")"
          git push "$authed_url" "refs/tags/$TAG" --force

      - name: Create Gitea release + upload asset (CHANGELOG_PAT)
        shell: bash
        env:
          CHANGELOG_PAT: ${{ secrets.CHANGELOG_PAT }}
        run: |
          set -e

          origin_url="$(git remote get-url origin)"
          if echo "$origin_url" | grep -q "^git@"; then
            host="$(echo "$origin_url" | sed -E 's#git@([^:]+):.*#\1#')"
            path="$(echo "$origin_url" | sed -E 's#git@[^:]+:(.*)#\1#')"
            origin_url="https://$host/$path"
          fi

          base="$(echo "$origin_url" | sed -E 's#(https?://[^/]+)/.*#\1#')"
          repo_path="$(echo "$origin_url" | sed -E 's#https?://[^/]+/##')"
          repo_path="$(echo "$repo_path" | sed -E 's/\.git$//')"

          owner="$(echo "$repo_path" | cut -d/ -f1)"
          repo="$(echo "$repo_path" | cut -d/ -f2-)"

          api="$base/api/v1"

          python3 - <<'PY'
          import json, os
          tag = os.environ["TAG"]
          name = os.environ["RELEASE_NAME"]

          with open("RELEASE_NOTES.md", "r", encoding="utf-8") as f:
              body = f.read()

          payload = {
              "tag_name": tag,
              "target_commitish": "main",
              "name": name,
              "body": body,
              "draft": False,
              "prerelease": False,
          }

          with open("release.json", "w", encoding="utf-8") as f:
              json.dump(payload, f)
          PY

          curl -sS -X POST \
            -H "Authorization: Bearer ${CHANGELOG_PAT}" \
            -H "Content-Type: application/json" \
            "${api}/repos/${owner}/${repo}/releases" \
            --data-binary @release.json \
            -o release_response.json

          release_id="$(python3 - <<'PY'
          import json
          with open("release_response.json","r",encoding="utf-8") as f:
              data=json.load(f)
          rid=data.get("id")
          if not rid:
              raise SystemExit("No release id returned. Response:\n" + json.dumps(data, indent=2))
          print(rid)
          PY
          )"
          echo "Created release id: $release_id"

          curl -sS -X POST \
            -H "Authorization: Bearer ${CHANGELOG_PAT}" \
            "${api}/repos/${owner}/${repo}/releases/${release_id}/assets?name=Computing%3ABox%20Website.zip" \
            -F "attachment=@${ZIP_PATH}" \
            >/dev/null

          echo "✅ Release created: ${RELEASE_NAME} (tag: ${TAG}) with asset uploaded"