main.yml

name: Builds, tests & co

on:
  - push
  - pull_request

permissions: read-all

jobs:
  hygiene:
    name: Hygiene

    runs-on: ubuntu-latest

    steps:
      - name: Checkout tree
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Set-up Node.js LTS
        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
        with:
          node-version: lts/*

      - run: corepack enable

      - run: yarn install --immutable

      - run: yarn format:check

      - run: yarn lint

      - run: yarn type-check

      - name: Ensure dist directory is up-to-date
        if: runner.os == 'Linux'
        shell: bash
        run: |
          yarn build
          if [ "$(git status dist --porcelain | wc -l)" -gt "0" ]; then
            echo "Detected uncommitted changes after build. See status below:"
            git diff
            exit 1
          fi

  test:
    name: Test

    runs-on: ubuntu-latest

    steps:
      - name: Checkout tree
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Use latest Pulumi
        uses: ./

  build-and-push:
    name: Build and Push

    if: ${{ github.event_name == 'pull_request' && github.actor == 'renovate[bot]' }}

    runs-on: ubuntu-latest

    steps:
      - name: Checkout tree
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 2
          ref: ${{ github.head_ref }}
          repository: ${{ github.event.pull_request.head.repo.full_name }}
          token: ${{ secrets.PAT }}

      - name: Set-up Node.js LTS
        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
        with:
          node-version: lts/*

      - run: corepack enable

      - run: yarn install --immutable

      - run: yarn build

      - name: Get last commit message
        id: last-commit-message
        run: echo "message=$(git log -1 --pretty=%s)" >>"$GITHUB_OUTPUT"

      - name: Commit changes
        uses: stefanzweifel/git-auto-commit-action@8621497c8c39c72f3e2a999a26b4ca1b5058a842 # v5.0.1
        with:
          commit_message: ${{ steps.last-commit-message.outputs.message }}
          commit_options: --amend --no-edit
          push_options: --force
          skip_fetch: true