release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      # Auto-generated from .version by sync-version-file.yml
      # VERSION_INPUT_BEGIN
      version_preview:
        description: "Version from .version (read-only preview)"
        required: true
        type: choice
        options:
          - "2.3.0"
        default: "2.3.0"
      # VERSION_INPUT_END

permissions:
  contents: write
  issues: write
  pull-requests: write

concurrency:
  group: release-${{ github.run_id }}
  cancel-in-progress: false

jobs:
  release:
    name: Publish Release
    runs-on: ubuntu-latest
    if: ${{ github.repository_owner == 'HDCharts' }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: 17
          distribution: 'zulu'
          cache: gradle

      - name: Resolve release version from Axion
        id: version
        shell: bash
        run: |
          set -euo pipefail
          release_version="$(bash .github/scripts/resolve-release-version.sh)"
          echo "release_version=${release_version}" >> "$GITHUB_OUTPUT"
          echo "Resolved release version: ${release_version}"

      - name: Verify release readiness with Axion
        shell: bash
        run: |
          set -euo pipefail
          ./gradlew verifyRelease --no-daemon --stacktrace

      - name: Verify tag does not already exist
        shell: bash
        run: |
          set -euo pipefail
          VERSION="${{ steps.version.outputs.release_version }}"
          if git rev-parse -q --verify "refs/tags/${VERSION}" >/dev/null; then
            echo "❌ Tag already exists: ${VERSION}" >&2
            exit 1
          fi

      - name: Checkout charts-docs repository
        uses: actions/checkout@v6
        with:
          repository: HDCharts/charts-docs
          fetch-depth: 1
          path: charts-docs-repo

      - name: Validate release version exists in charts-docs registry
        shell: bash
        env:
          EXPECTED_VERSION: ${{ steps.version.outputs.release_version }}
        run: |
          set -euo pipefail
          registry_path="charts-docs-repo/registry/versions.json"
          if [[ ! -f "${registry_path}" ]]; then
            echo "Missing charts-docs registry: ${registry_path}" >&2
            exit 1
          fi

          if ! jq -e --arg expected "${EXPECTED_VERSION}" \
            'any((.versions // [])[]?; .id == $expected)' "${registry_path}" >/dev/null; then
            available_versions="$(jq -r '[(.versions // [])[]? | .id | select(type == "string" and . != "")] | join(", ")' "${registry_path}")"
            echo "Release version ${EXPECTED_VERSION} is not present in charts-docs registry." >&2
            echo "Available registry versions: ${available_versions:-"(none)"}" >&2
            exit 1
          fi

      - name: Check required secrets
        id: secrets_check
        env:
          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
          SIGNING_KEY_ID: ${{ secrets.SIGNING_KEY_ID }}
          SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
          SIGNING_IN_MEMORY_KEY: ${{ secrets.SIGNING_IN_MEMORY_KEY }}
        shell: bash
        run: |
          set -euo pipefail
          missing=0
          for v in MAVEN_CENTRAL_USERNAME MAVEN_CENTRAL_PASSWORD SIGNING_KEY_ID SIGNING_PASSWORD SIGNING_IN_MEMORY_KEY; do
            if [ -z "${!v:-}" ]; then
              echo "Missing secret: $v" >&2
              missing=1
            fi
          done
          if [ "$missing" -eq 0 ]; then
            echo "can_publish=true" >> "$GITHUB_OUTPUT"
          else
            echo "can_publish=false" >> "$GITHUB_OUTPUT"
            echo "Release publish cannot proceed because required secrets are missing." >&2
            exit 1
          fi

      - name: Create release tag locally with Axion
        if: ${{ steps.secrets_check.outputs.can_publish == 'true' }}
        shell: bash
        run: |
          set -euo pipefail
          ./gradlew createRelease --no-daemon --stacktrace

      - name: Publish to Maven Central
        if: ${{ steps.secrets_check.outputs.can_publish == 'true' }}
        env:
          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.SIGNING_IN_MEMORY_KEY }}
          ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.SIGNING_KEY_ID }}
          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
        run: |
          ./gradlew publishChartsModules \
            -PchartsReleaseVersion="${{ steps.version.outputs.release_version }}" \
            --no-daemon --no-build-cache --stacktrace

      - name: Push release tag with Axion
        if: ${{ steps.secrets_check.outputs.can_publish == 'true' }}
        shell: bash
        run: |
          set -euo pipefail
          ./gradlew pushRelease --no-daemon --stacktrace

      - name: Comment on success
        if: ${{ steps.secrets_check.outputs.can_publish == 'true' }}
        uses: actions/github-script@v7
        with:
          script: |
            const version = '${{ steps.version.outputs.release_version }}';
            const message = [
              '🎉 **Release Published Successfully!**',
              '',
              `Version: \`${version}\``,
              '',
              '✅ Published to Maven Central',
              '✅ Git tag created',
              '',
              'Umbrella artifact:',
              '```kotlin',
              `implementation("io.github.dautovicharis:charts:${version}")`,
              '```',
              '',
              'Modular artifacts:',
              '```kotlin',
              `implementation("io.github.dautovicharis:charts-core:${version}")`,
              `implementation("io.github.dautovicharis:charts-line:${version}")`,
              `implementation("io.github.dautovicharis:charts-pie:${version}")`,
              `implementation("io.github.dautovicharis:charts-bar:${version}")`,
              `implementation("io.github.dautovicharis:charts-stacked-bar:${version}")`,
              `implementation("io.github.dautovicharis:charts-stacked-area:${version}")`,
              `implementation("io.github.dautovicharis:charts-radar:${version}")`,
              '```',
              '',
              'BOM alignment (for Gradle platforms):',
              '```kotlin',
              `implementation(platform("io.github.dautovicharis:charts-bom:${version}"))`,
              'implementation("io.github.dautovicharis:charts-core")',
              'implementation("io.github.dautovicharis:charts-line")',
              'implementation("io.github.dautovicharis:charts-pie")',
              'implementation("io.github.dautovicharis:charts-bar")',
              'implementation("io.github.dautovicharis:charts-stacked-bar")',
              'implementation("io.github.dautovicharis:charts-stacked-area")',
              'implementation("io.github.dautovicharis:charts-radar")',
              '```',
              '',
              '📚 [Documentation](https://charts.harisdautovic.com/)',
              `📦 [Maven Central](https://central.sonatype.com/artifact/io.github.dautovicharis/charts/${version})`,
            ].join('\n');

            // Create a comment on the commit
            github.rest.repos.createCommitComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              commit_sha: context.sha,
              body: message
            });