release-please.yml

name: Release Please

on:
  push:
    branches:
      - main
  workflow_dispatch:
    inputs:
      publish:
        description: Publish to NPM
        required: true
        default: false
        type: boolean

permissions:
  contents: read

jobs:
  release-please:
    permissions:
      id-token: write # to enable use of OIDC for npm provenance
      # permissions for pushing commits and opening PRs are handled by the `generate-token` step
    runs-on: ubuntu-latest
    steps:
      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ secrets.ECOSPARK_APP_ID }}
          private-key: ${{ secrets.ECOSPARK_APP_PRIVATE_KEY }}
      # This action will create a release PR when regular conventional commits are pushed to main, it'll also detect if a release PR is merged and npm publish should happen
      - uses: googleapis/release-please-action@v4
        id: release
        with:
          token: ${{ steps.app-token.outputs.token }}

      # Publish to NPM on new releases
      - uses: actions/checkout@v4
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
      - uses: pnpm/action-setup@v4
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
      - uses: actions/setup-node@v4
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
        with:
          cache: pnpm
          node-version: lts/*
          registry-url: "https://registry.npmjs.org"
      - name: Authenticate with private NPM for installing @sanity/sanitype
        run: pnpm config set '//registry.npmjs.org/:_authToken' "${NODE_AUTH_TOKEN}"
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
        env:
          NODE_AUTH_TOKEN: ${{secrets.NPM_SANITYPE_TOKEN}}
      - run: pnpm install --ignore-scripts
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
      - name: Set publishing config
        run: pnpm config set '//registry.npmjs.org/:_authToken' "${NODE_AUTH_TOKEN}"
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
        env:
          NODE_AUTH_TOKEN: ${{secrets.NPM_PUBLISH_TOKEN}}
      # Release Please has already incremented versions and published tags, so we just
      # need to publish the new version to npm here
      - run: pnpm publish
        if: ${{ steps.release.outputs.release_created || github.event.inputs.publish == 'true' }}
        env:
          NPM_CONFIG_PROVENANCE: true