78 lines
2.4 KiB
YAML
78 lines
2.4 KiB
YAML
name: Draft release
|
|
run-name: Draft release ${{ inputs.next_version }}
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
next_version:
|
|
required: true
|
|
type: string
|
|
description: 'Version name'
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
draft_release:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Generate GitHub App token
|
|
id: generate-token
|
|
uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94
|
|
with:
|
|
app-id: ${{ secrets.CI_CAL_APP_ID }}
|
|
private-key: ${{ secrets.CI_CAL_APP_PRIVATE_KEY }}
|
|
repositories: 'cal.com'
|
|
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
ref: 'main'
|
|
token: ${{ steps.generate-token.outputs.token }}
|
|
|
|
- name: Configure git
|
|
run: |
|
|
# Define authorized users and their emails using organization secret
|
|
# Expected format: JSON object with username -> email mapping
|
|
# Example: {"zomars": "zomars@cal.com", "peer": "peer@cal.com", "username3": "email3@cal.com"}
|
|
USER_EMAILS='${{ secrets.RELEASE_USER_EMAILS }}'
|
|
|
|
# Extract email for the triggering user
|
|
USER_EMAIL=$(echo "$USER_EMAILS" | jq -r --arg user "${{ github.actor }}" '.[$user] // empty')
|
|
|
|
# Fail if user is not authorized or not in mapping
|
|
if [ -z "$USER_EMAIL" ] || [ "$USER_EMAIL" = "null" ]; then
|
|
echo "Error: User '${{ github.actor }}' is not authorized to run the release workflow."
|
|
echo "Only authorized team members can trigger releases."
|
|
echo "Contact your administrator to be added to the authorized users list."
|
|
exit 1
|
|
fi
|
|
|
|
git config --local user.email "$USER_EMAIL"
|
|
git config --local user.name "${{ github.actor }}"
|
|
|
|
- uses: ./.github/actions/yarn-install
|
|
|
|
- name: Bump version
|
|
env:
|
|
VERSION: ${{ inputs.next_version }}
|
|
run: |
|
|
cd apps/web
|
|
yarn version "$VERSION"
|
|
|
|
- name: Commit changes
|
|
env:
|
|
VERSION: ${{ inputs.next_version }}
|
|
run: |
|
|
git add .
|
|
git commit -m "chore: release v$VERSION"
|
|
git push
|
|
|
|
- name: Draft release
|
|
run: gh release create v$VERSION --generate-notes --draft
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
VERSION: ${{ inputs.next_version }}
|