deploy.yml

name: Production Deploy

on:
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: write # Write is required to create/update releases
    steps:
      - name: Ensure pre-requisites for deployment are met
        id: validate_deployment
        uses: actions/github-script@v7
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            const { owner, repo } = context.repo;
            /* 
             * We should only need to load 1 release here, as pending should be at the top of the list.
             * We're loading a few extras here in case we get into a weird state.
             */
            const PAGE_SIZE = 5;
            const releases = await github.rest.repos.listReleases({ owner, repo });

            const pendingReleases = releases.data.filter(release => release.prerelease);
            if (pendingReleases.length > 1) {
              throw new Error(`Found more than one pending release: ${pendingReleases.map(release => release.tag_name).join(', ')}`);
            }

            const targetRelease = pendingReleases.find(release => release.tag_name === "${{github.ref_name}}");
            if (!targetRelease) {
              throw new Error(`No pending release found for tag: ${github.ref_name}`);
            }

            console.log(`Found pending release ${targetRelease.id}, proceeding with deployment: ${targetRelease.url}`);
            return {
              releaseId: targetRelease.id,
            }

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Deploy to Production
        # To emulate deployments here we are simply shifting the latest tag to the appropriate docker image.
        # In a real world scenario, you would replace this with your actual deployment steps.
        run: |
          docker pull ghcr.io/${{ github.repository }}:${{github.ref_name}}
          docker tag ghcr.io/${{ github.repository }}:${{github.ref_name}} ghcr.io/${{ github.repository }}:latest
          docker push ghcr.io/${{ github.repository }}:latest

      - name: Mark release as deployed
        uses: actions/github-script@v7
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          script: |
            const { owner, repo } = context.repo;
            const releaseId = context.payload.release.id;
            await github.rest.repos.updateRelease({
              owner,
              repo,
              release_id: ${{ steps.validate_deployment.outputs.result.releaseId }},
              prerelease: false,
              make_latest: true
            });