ci.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: CI

permissions:
    contents: read

concurrency:
    group: ci-${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.pull_request.number) || github.ref }}
    cancel-in-progress: ${{ github.event_name == 'pull_request' }}

on:
    push:
        branches:
            - master
            - release/*
        paths-ignore:
          - '**/*.md'
          - '**/*.gitignore'
          - '**/*.gitattributes'
    pull_request:
        branches:
            - master
            - release/*
        paths-ignore:
            - '**/*.md'
            - '**/*.gitignore'
            - '**/*.gitattributes'
jobs:
    build:
        if: github.event_name == 'pull_request' || (github.event_name == 'push' && contains(toJson(github.event.commits), '***NO_CI***') == false && contains(toJson(github.event.commits), '[ci skip]') == false && contains(toJson(github.event.commits), '[skip ci]') == false)
        runs-on: ubuntu-latest
        permissions:
            contents: read
            id-token: write
        outputs:
            publication_succeeded: ${{ steps.publish.outputs.succeeded }}
        env:
          DOTNET_CLI_TELEMETRY_OPTOUT: 1
          DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 1
          DOTNET_NOLOGO: true
          DOTNET_GENERATE_ASPNET_CERTIFICATE: false
          DOTNET_ADD_GLOBAL_TOOLS_TO_PATH: false
          DOTNET_MULTILEVEL_LOOKUP: 0

        steps:
            - name: checkout code
              uses: actions/checkout@v5
              with:
                  persist-credentials: false

            - name: setup .net core sdk
              uses: actions/setup-dotnet@v5
              with:
                  dotnet-version: |
                    8.0.x
                    9.0.x
                    10.0.x

            - name: dotnet build
              run: dotnet build solrevdev.seedfolder.sln --configuration Release

            - name: run integration tests
              run: ./tests/integration-test.sh

            - name: dotnet pack
              run: dotnet pack solrevdev.seedfolder.sln -c Release --no-build --include-source --include-symbols

            - name: verify versioned package
              id: package
              shell: bash
              run: |
                version=$(sed -n 's:.*<Version>\(.*\)</Version>.*:\1:p' src/solrevdev.seedfolder.csproj)
                package="src/nupkg/solrevdev.seedfolder.${version}.nupkg"

                if [[ -z "$version" ]]; then
                  echo "Unable to find the package version." >&2
                  exit 1
                fi

                if [[ ! -f "$package" ]]; then
                  echo "Expected package does not exist: ${package}" >&2
                  exit 1
                fi

                echo "version=${version}" >> "$GITHUB_OUTPUT"
                echo "package=${package}" >> "$GITHUB_OUTPUT"

            - name: log in to NuGet
              id: nuget
              if: github.event_name == 'push' && github.ref == 'refs/heads/master'
              uses: NuGet/login@v1
              with:
                user: solrevdev

            - name: publish NuGet
              id: publish
              if: github.event_name == 'push' && github.ref == 'refs/heads/master'
              env:
                NUGET_API_KEY: ${{ steps.nuget.outputs.NUGET_API_KEY }}
                PACKAGE: ${{ steps.package.outputs.package }}
              run: |
                dotnet nuget push "$PACKAGE" \
                  --api-key "$NUGET_API_KEY" \
                  --source https://api.nuget.org/v3/index.json \
                  --skip-duplicate

                echo "succeeded=true" >> "$GITHUB_OUTPUT"

    tag-release:
        needs: build
        if: github.event_name == 'push' && github.ref == 'refs/heads/master' && needs.build.result == 'success' && needs.build.outputs.publication_succeeded == 'true'
        runs-on: ubuntu-latest
        permissions:
            contents: write
        steps:
            - name: checkout published commit
              uses: actions/checkout@v5
              with:
                  ref: ${{ github.sha }}

            - name: verify or create release tag
              shell: bash
              run: |
                expected_commit="$GITHUB_SHA"
                version=$(sed -n 's:.*<Version>\(.*\)</Version>.*:\1:p' src/solrevdev.seedfolder.csproj)
                tag="v${version}"

                if [[ -z "$version" ]]; then
                  echo "Unable to find the package version." >&2
                  exit 1
                fi

                if [[ "$(git rev-parse HEAD)" != "$expected_commit" ]]; then
                  echo "Checked-out commit does not match the intended release commit." >&2
                  exit 1
                fi

                if git ls-remote --exit-code --refs origin "refs/tags/${tag}" >/dev/null 2>&1; then
                  git fetch --no-tags origin "refs/tags/${tag}:refs/tags/${tag}"
                  tag_commit=$(git rev-list -n 1 "refs/tags/${tag}")
                  tag_version=$(git show "refs/tags/${tag}:src/solrevdev.seedfolder.csproj" | sed -n 's:.*<Version>\(.*\)</Version>.*:\1:p')

                  if [[ "$tag_commit" != "$expected_commit" ]]; then
                    echo "Tag ${tag} resolves to ${tag_commit}, expected ${expected_commit}." >&2
                    exit 1
                  fi

                  if [[ "$tag_version" != "$version" ]]; then
                    echo "Tag ${tag} contains version ${tag_version}, expected ${version}." >&2
                    exit 1
                  fi

                  echo "Tag ${tag} already identifies the published commit and version; safe retry."
                  exit 0
                fi

                git tag "$tag" "$expected_commit"
                git push origin "refs/tags/${tag}:refs/tags/${tag}"