release.yaml

---
on:
  release:
    types: [published]

name: release
jobs:
  release:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: write
    steps:
      - uses: actions/checkout@v3

      - uses: nixbuild/nix-quick-install-action@v22
        with:
          nix_version: 2.14.1
          nix_conf: |
            experimental-features = nix-command flakes
            sandbox = false
            substituters = https://cache.nixos.org/?priority=40
            trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
            builders-use-substitutes = true
            extra-platforms = aarch64-linux

      - name: Cache nix store
        uses: actions/cache@v3
        with:
          path: /nix
          key: nix-build-${{ hashFiles('flake.nix', 'flake.lock', '**.nix') }}

      - name: place let's encrypt cert
        run: |
          cat <<EOF > ssl/.ssl/fullchain.pem
          ${{ secrets.CERT_FULL_CHAIN }}
          EOF
          cat <<EOF > ssl/.ssl/privkey.pem
          ${{ secrets.CERT_PRIV_KEY }}
          EOF
        shell: bash

      - name: "Build artifact"
        run: |
          export GORELEASER_CURRENT_TAG=${{ steps.vars.outputs.VERSION }}
          nix develop .\#cibuild -c goreleaser release --skip-validate

      - name: Upload assets
        shell: bash
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release upload --clobber "${{ github.ref_name }}" ./dist/*.tar.gz ./dist/checksums.txt

  update-releases-file:
    name: Update Releases File
    runs-on: ubuntu-latest
    needs: release
    steps:
      - uses: actions/checkout@v3.5.0
        with:
          ref: gh-pages
      - name: Generate releases.json
        shell: bash
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
        run: |
          gh api repos/nhost/cli/releases > releases.json
      - name: Check if there are changes
        id: changes
        shell: bash
        run: |
          if [[ -z "$(git status --porcelain . )" ]]; then
           echo "::set-output name=changed::0"
          else
           echo "::set-output name=changed::1"
          fi
      - name: Committing releases.json
        shell: bash
        if: steps.changes.outputs.changed == 1
        run: |
          git config --local user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git config --local user.name "github-actions[bot]"
          git add .
          git commit -m "" --allow-empty-message
      - name: Push changes
        uses: ad-m/github-push-action@master
        if: steps.changes.outputs.changed == 1
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          branch: gh-pages
          force: true