publish_nuget.yml

name: Publish to nuget

on:
  workflow_dispatch:
  workflow_run:
    workflows:
      - "Publish to npm"
      - "Publish to npm (dev)"
    branches:
      - master
      - develop
    types:
      - completed

env:
  NUGET_USER: kendo-bot
  NUGET_FEED: "https://nuget.pkg.github.com/telerik/index.json"

jobs:

  nuget-publish:
    runs-on: ubuntu-22.04
    environment: upload

    permissions:
        id-token: write # Required by Akeyless
        contents: read
        packages: read

    steps:
      - name: Import Secrets
        id: import-secrets
        uses: LanceMcCarthy/akeyless-action@v3
        with:
          access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
          static-secrets: '{ "/WebComponents/prod/tokens/GH_TOKEN_PUBLISH": "GH_TOKEN_PUBLISH" }'
          export-secrets-to-environment: false

      - name: Checkout branch
        uses: actions/checkout@v4
        with:
          ref: develop

      - name: Setup node
        id: setup-node
        uses: actions/setup-node@v4
        with:
          node-version: 20.x

      - name: Setup nuget
        uses: nuget/setup-nuget@v1

      - name: Install
        run: npm ci --no-audit --no-fund

      - name: Build themes for dist
        run: |
          npm run sass
          npm run sass:swatches
          npm run docs

      - name: Pack nuget
        run: |
          npx lerna run nuget-pack

      - name: Push nuget
        run: |
          nuget sources add -username ${{ env.NUGET_USER }} -password %NUGET_API_KEY% -StorePasswordInClearText -Name github -Source ${{ env.NUGET_FEED }}
          npx lerna run nuget-push
        env:
          NUGET_API_KEY: ${{ steps.import-secrets.outputs.GH_TOKEN_PUBLISH }}