changeset-snapshot.yml

name: Changeset Snapshot

on:
  workflow_dispatch:
  issue_comment:
    types: [created]

defaults:
  run:
    shell: bash
    
env:
  FORCE_COLOR: 1

concurrency: ${{ github.workflow }}-${{ github.ref }}

permissions:
  contents: write
  pull-requests: write
  issues: write
  id-token: write
  actions: read
  checks: read
  deployments: read
  discussions: read
  packages: read
  pages: read
  repository-projects: read
  security-events: read
  statuses: read
  
jobs:
  snapshot-release:
    name: Create a snapshot release of a pull request
    if: ${{ github.repository_owner == 'astrolicious' && github.event.issue.pull_request && (contains(github.event.comment.body, '!preview') || contains(github.event.comment.body, '/preview') || contains(github.event.comment.body, '!snapshot') || contains(github.event.comment.body, '/snapshot')) }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
      issues: write
      pull-requests: write
    steps:
      - name: "Check if user has write access"
        uses: "lannonbr/repo-permission-check-action@2bb8c89ba8bf115c4bfab344d6a6f442b24c9a1f" # 2.0.2
        with:
          permission: "write"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract the snapshot name from comment body
        id: getSnapshotName
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
        with:
          script: |
            const { body } = context.payload.comment;
            const PREVIEW_RE = /^[!\/](?:preview|snapshot)\s+(\S*)\s*$/gim;
            const [_, name] = PREVIEW_RE.exec(body) ?? [];
            if (name) return name;

            const error = 'Invalid command. Expected: "/preview <snapshot-name>"'
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: error,
            })
            core.setFailed(error)
          result-encoding: string

      - name: resolve pr refs
        id: refs
        uses: eficode/resolve-pr-refs@main
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          ref: ${{ steps.refs.outputs.head_ref }}
          fetch-depth: 0

      - run: git fetch origin main:main

      - name: Setup pnpm (corepack enabled)
        uses: pnpm/action-setup@v2

      - name: Setup Node.js 20.x
        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
        with:
          node-version-file: '.node-version'
          cache: 'pnpm'
        
      - name: Install dependencies
        run: pnpm ci:install

      - name: Bump Package Versions
        id: changesets
        run: |
          pnpm exec changeset status --output status.output.json 2>&1
          pnpm exec changeset version --snapshot ${{ steps.getSnapshotName.outputs.result }}

          EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
          echo "status<<$EOF" >> $GITHUB_OUTPUT
          echo "$(cat status.output.json)" >> $GITHUB_OUTPUT
          echo "$EOF" >> $GITHUB_OUTPUT
        env:
          # Needs access to run the script
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          # Disable color
          FORCE_COLOR: 0
          NO_COLOR: 1

      - name: Publish Release
        id: publish
        run: |
          GITHUB_ACTIONS=0 pnpm run build > build.output.txt 2>&1
          pnpm exec changeset publish --tag experimental--${{ steps.getSnapshotName.outputs.result }} > publish.output.txt 2>&1

          EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)

          echo "build<<$EOF" >> $GITHUB_OUTPUT
          echo "$(cat build.output.txt)" >> $GITHUB_OUTPUT
          echo "$EOF" >> $GITHUB_OUTPUT
          cat build.output.txt

          echo "publish<<$EOF" >> $GITHUB_OUTPUT
          echo "$(cat publish.output.txt)" >> $GITHUB_OUTPUT
          echo "$EOF" >> $GITHUB_OUTPUT
          cat publish.output.txt
        env:
          # Needs access to publish to npm
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
          # Disable color
          FORCE_COLOR: 0
          NO_COLOR: 1

      - name: Pull Request Notification
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
        env:
          TAG: ${{ steps.getSnapshotName.outputs.result }}
          STATUS_DATA: ${{ steps.changesets.outputs.status }}
          BUILD_LOG: ${{ steps.publish.outputs.build }}
          PUBLISH_LOG: ${{ steps.publish.outputs.publish }}
        with:
          github-token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }}
          script: |
            let changeset = { releases: [] };
            try {
              changeset = JSON.parse(process.env.STATUS_DATA);
            } catch (e) {}
            let message = 'Snapshots have been released for the following packages:'
            for (const release of changeset.releases) {
              if (release.type === 'none') continue;
              message += `\n- \`${release.name}@experimental--${process.env.TAG}\``;
            }

            function details(title, body) {
              message += '\n';
              message += `<details><summary><strong>${title}</strong></summary>`
              message += '\n\n```\n';
              message += body;
              message += '\n```\n\n</details>';
            }

            details('Publish Log', process.env.PUBLISH_LOG);
            details('Build Log', process.env.BUILD_LOG);

            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: message,
            })