PasswordGeneratorExtension/.github/workflows/cd_pipeline.yaml

name: Release pipeline

on:
  release:
    types: [ released ]
  workflow_dispatch:
    inputs:
      targets:
        description: Targets
        required: true
        default: "chrome,firefox"
        type: string
      firefox:
        description: Deploy Firefox
        type: boolean
        default: true
      chrome:
        description: Deploy Chrome
        type: boolean
        default: true
      edge:
        description: Deploy Edge
        type: boolean
        default: true
      gh-release:
        description: Attach to GitHub release
        type: boolean
        default: true

jobs:
  build:
    runs-on: ubuntu-latest
    container: node:20
    strategy:
      fail-fast: false
      matrix:
        target: ${{ fromJSON(format('[%s]', github.event.inputs.targets || 'chrome,firefox')) }}

    steps:
      - uses: actions/checkout@main

      - run: yarn install
      - run: yarn lint
      - run: TARGET=${{ matrix.target }} yarn build

      - name: Drop build artifacts (${{ matrix.target }})
        uses: actions/upload-artifact@main
        with:
          name: ${{ matrix.target }}
          path: dist

      - name: "web-ext lint"
        if: ${{ matrix.target == 'firefox' }}
        uses: kewisch/action-web-ext@cb8a69420fea686e331e270b6581d4d289ecb2d2
        with:
          cmd: lint
          source: dist
          channel: listed

      - uses: TheDoctor0/zip-release@main
        with:
          filename: packed-${{ matrix.target }}.zip
          path: dist

      - name: Drop packed artifacts (${{ matrix.target }})
        uses: actions/upload-artifact@main
        with:
          name: packed-${{ matrix.target }}
          path: packed-${{ matrix.target }}.zip

  publish-github:
    needs: build
    if: ${{ github.event_name == 'release' || github.event.inputs.gh-release == 'true' }}
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        target: ${{ fromJSON(format('[%s]', github.event.inputs.targets || 'chrome,firefox')) }}

    steps:
      - uses: actions/download-artifact@main
        with:
          name: packed-${{ matrix.target }}

      - name: Attach build to release
        uses: xresloader/upload-to-github-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          file: PasswordGenerator-${{ matrix.target }}.zip
          draft: false
          overwrite: true
          update_latest_release: true

  publish-chrome:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.chrome == 'true' && contains(fromJson(format('[%s]', github.event.inputs.targets)), 'chrome')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: packed-chrome

      - uses: wdzeng/chrome-extension@main
        with:
          extension-id: jnjobgjobffgmgfnkpkjfjkkfhfikmfl
          zip-path: packed-chrome.zip
          client-id: ${{ secrets.CHROME_CLIENT_ID }}
          client-secret: ${{ secrets.CHROME_CLIENT_SECRET }}
          refresh-token: ${{ secrets.CHROME_REFRESH_TOKEN }}

  publish-edge:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.edge == 'true' && contains(fromJson(format('[%s]', github.event.inputs.targets)), 'chrome')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: packed-chrome

      - uses: wdzeng/edge-addon@main
        with:
          product-id: ${{ secrets.EDGE_PRODUCT_ID }}
          zip-path: packed-chrome.zip
          client-id: ${{ secrets.EDGE_CLIENT_ID }}
          client-secret: ${{ secrets.EDGE_CLIENT_SECRET }}
          access-token-url: ${{ secrets.EDGE_ACCESS_TOKEN_URL }}

  publish-firefox:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.firefox == 'true' && contains(fromJson(format('[%s]', github.event.inputs.targets)), 'firefox')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: packed-firefox

      - uses: wdzeng/firefox-addon@main
        with:
          addon-guid: ${{ secrets.FIREFOX_EXT_UUID }}
          xpi-path: packed-firefox.zip
          jwt-issuer: ${{ secrets.FIREFOX_API_KEY }}
          jwt-secret: ${{ secrets.FIREFOX_CLIENT_SECRET }}