TabsAsideExtension/.github/workflows/cd_pipeline.yml

name: Release pipeline

on:
  release:
    types: [ released ]
  workflow_dispatch:
    inputs:
      bypass_audit:
        description: Bypass npm audit
        type: boolean
        default: false
      targets:
        description: Targets
        required: true
        default: '["chrome","firefox"]'
        type: choice
        options:
          - '["chrome","firefox"]'
          - '["chrome"]'
          - '["firefox"]'
      firefox:
        description: Deploy Firefox
        type: boolean
        default: true
      chrome:
        description: Deploy Chrome
        type: boolean
        default: true
      edge:
        description: Deploy Edge
        type: boolean
        default: true
      gh-release:
        description: Attach to GitHub release
        type: boolean
        default: true

jobs:
  build:
    runs-on: ubuntu-latest
    container: node:20
    strategy:
      fail-fast: false
      matrix:
        target: ${{ fromJSON(github.event.inputs.targets || '["chrome","firefox"]') }}

    steps:
      - uses: actions/checkout@main

      - run: |
          echo "WXT_GA4_API_SECRET=${{ secrets.GA4_SECRET }}" >> .env
          echo "WXT_GA4_MEASUREMENT_ID=${{ secrets.GA4_MEASUREMENT_ID }}" >> .env

      - run: yarn install

      # Patch for firefox dnd popup (see https://github.com/clauderic/dnd-kit/issues/1043)
      - run: grep -v "this.windowListeners.add(EventName.Resize, this.handleCancel);" core.esm.js > core.esm.js
        working-directory: ./node_modules/@dnd-kit/core/dist
        if: ${{ matrix.target == 'firefox' }}

      - run: yarn zip -b ${{ matrix.target }}

      - name: Drop build artifacts (${{ matrix.target }})
        uses: actions/upload-artifact@main
        with:
          name: ${{ matrix.target }}
          path: ./.output/tabs-aside-*.zip
          include-hidden-files: true

      - name: web-ext lint
        if: ${{ matrix.target == 'firefox' }}
        uses: freaktechnik/web-ext-lint@main
        with:
          extension-root: ./.output/firefox-mv3
          self-hosted: false

      - run: yarn audit
        continue-on-error: ${{ github.event_name != 'release' && github.event.inputs.bypass_audit == 'true' }}

  publish-github:
    needs: build
    if: ${{ github.event_name == 'release' || github.event.inputs.gh-release == 'true' }}
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        target: ${{ fromJSON(github.event.inputs.targets || '["chrome","firefox"]') }}

    steps:
      - uses: actions/download-artifact@main
        with:
          name: ${{ matrix.target }}

      - name: Attach build to release
        uses: xresloader/upload-to-github-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          file: tabs-aside-*-${{ matrix.target }}.zip
          draft: false
          overwrite: true
          update_latest_release: true

  publish-chrome:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.chrome == 'true' && contains(github.event.inputs.targets, 'chrome')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: chrome

      - uses: wdzeng/chrome-extension@v1.3.0
        with:
          extension-id: ${{ secrets.CHROME_EXT_ID }}
          zip-path: tabs-aside-*-chrome.zip
          client-id: ${{ secrets.CHROME_CLIENT_ID }}
          client-secret: ${{ secrets.CHROME_CLIENT_SECRET }}
          refresh-token: ${{ secrets.CHROME_REFRESH_TOKEN }}

  publish-edge:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.edge == 'true' && contains(github.event.inputs.targets, 'chrome')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: chrome

      - uses: wdzeng/edge-addon@v2.1.0
        with:
          product-id: ${{ secrets.EDGE_PRODUCT_ID }}
          zip-path: tabs-aside-*-chrome.zip
          client-id: ${{ secrets.EDGE_CLIENT_ID }}
          api-key: ${{ secrets.EDGE_API_KEY }}

  publish-firefox:
    needs: build
    if: ${{ github.event_name == 'release' || (github.event.inputs.firefox == 'true' && contains(github.event.inputs.targets, 'firefox')) }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/download-artifact@main
        with:
          name: firefox

      - uses: wdzeng/firefox-addon@v1.2.0
        with:
          addon-guid: ${{ secrets.FIREFOX_EXT_UUID }}
          xpi-path: tabs-aside-*-firefox.zip
          source-file-path: tabs-aside-*-sources.zip
          jwt-issuer: ${{ secrets.FIREFOX_API_KEY }}
          jwt-secret: ${{ secrets.FIREFOX_CLIENT_SECRET }}