release.yml

name: release

on:
  workflow_dispatch:
    inputs:
      is-stack-release:
        type: boolean
        description: Should we tag the current version as a stack release?
        required: true
        default: false
      dry-run:
        type: boolean
        description: "Should we run in dry-run mode?"
        required: true
        default: false

permissions:
  id-token: write # to enable use of OIDC for npm provenance

jobs:
  release:
    runs-on: ubuntu-latest
    env:
      NPM_CONFIG_PROVENANCE: true
    steps:
      - name: Get token
        id: get_token
        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
        with:
          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
          permissions: >-
            {
              "contents": "write",
              "pull_requests": "read"
            }
          repositories: >-
            ["synthetics"]

      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ steps.get_token.outputs.token }}

      - uses: elastic/oblt-actions/git/setup@v1
        with:
          github-token: ${{ steps.get_token.outputs.token }}

      - run: npm ci # runs npm prepublish

      - name: configure NPMJS token
        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc

      - run: npx semantic-release --dry-run="${DRY_RUN}"
        env:
          DRY_RUN: ${{ github.event.inputs.dry-run }}
          GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}

      - name: Get version and package name
        run: |
          echo "VERSION=$(jq -r '.version' package.json)" >> $GITHUB_ENV
          echo "NPM_PACKAGE=$(jq -r '.name' package.json)" >> $GITHUB_ENV

      - name: Create 'stack_release' dist-tag
        if: ${{ github.event.inputs.dry-run == 'false' && github.event.inputs.is-stack-release == 'true' }}
        run: npm dist-tag add "${NPM_PACKAGE}@${VERSION}" stack_release

      - if: ${{ always() && github.event.inputs.dry-run == 'false' }}
        uses: elastic/oblt-actions/slack/notify-result@v1
        with:
          bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
          channel-id: "#synthetics-user_experience-uptime"