release-docker.yaml

name: "Release Docker"

permissions:
  contents: read
  packages: write

env:
  POSTGRES_USER: "unicorn_user"
  POSTGRES_PASSWORD: "magical_password"
  POSTGRES_DB: "calendso"
  DATABASE_HOST: "database:5432"

on:
  push:
    tags:
      - "v*"
  # in case manual trigger is needed
  workflow_dispatch:
    inputs:
      BUILD_FROM_BRANCH:
        description: "Build from the selected branch instead of a tag"
        type: boolean
        default: false
      RELEASE_TAG:
        description: "Tag to build (e.g., v6.0.5) - required if BUILD_FROM_BRANCH is false"
        required: false
      PUSH_IMAGE:
        description: "Push the Docker image to DockerHub"
        type: boolean
        default: true

jobs:
  prepare:
    name: "Prepare Release"
    runs-on: ubuntu-latest
    outputs:
      release_tag: ${{ steps.determine-tag.outputs.release_tag }}
      checkout_ref: ${{ steps.determine-tag.outputs.checkout_ref }}
    steps:
      - name: Validate inputs
        if: github.event_name == 'workflow_dispatch' && inputs.BUILD_FROM_BRANCH == false && inputs.RELEASE_TAG == ''
        run: |
          echo "::error::RELEASE_TAG is required when BUILD_FROM_BRANCH is false"
          exit 1

      - name: checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ (github.event_name == 'workflow_dispatch' && inputs.BUILD_FROM_BRANCH) && github.ref || inputs.RELEASE_TAG || github.ref }}

      - name: "Determine tag and ref"
        id: determine-tag
        run: |
          # Determine checkout ref
          if [ "${{ github.event_name }}" = "workflow_dispatch" ] && [ "${{ inputs.BUILD_FROM_BRANCH }}" = "true" ]; then
            echo "checkout_ref=${{ github.ref }}" >> $GITHUB_OUTPUT
          elif [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            echo "checkout_ref=${{ inputs.RELEASE_TAG }}" >> $GITHUB_OUTPUT
          else
            echo "checkout_ref=${{ github.ref }}" >> $GITHUB_OUTPUT
          fi

          # Determine release tag
          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            if [ "${{ inputs.BUILD_FROM_BRANCH }}" = "true" ]; then
              # Extract branch name and short SHA for the tag
              BRANCH_NAME="${GITHUB_REF#refs/heads/}"
              # Sanitize branch name: replace all invalid Docker tag characters with dashes
              # Docker tags can only contain lowercase/uppercase letters, digits, underscores, periods, and dashes
              # Also remove any leading dashes or periods
              SANITIZED_BRANCH=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9_.-]/-/g' | sed 's/^[-.]*//')
              SHORT_SHA=$(git rev-parse --short HEAD)
              echo "release_tag=${SANITIZED_BRANCH}-${SHORT_SHA}" >> $GITHUB_OUTPUT
            else
              echo "release_tag=${{ inputs.RELEASE_TAG }}" >> $GITHUB_OUTPUT
            fi
          else
            echo "release_tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
          fi

  release-amd64:
    name: "Release AMD64"
    needs: prepare
    runs-on: ubuntu-latest
    env:
      RELEASE_TAG: ${{ needs.prepare.outputs.release_tag }}
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ needs.prepare.outputs.checkout_ref }}

      - name: Build and test Docker image
        uses: ./.github/actions/docker-build-and-test
        with:
          platform: "linux/amd64"
          platform-suffix: ""
          dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
          dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}
          github-token: ${{ secrets.GITHUB_TOKEN }}
          postgres-user: ${{ env.POSTGRES_USER }}
          postgres-password: ${{ env.POSTGRES_PASSWORD }}
          postgres-db: ${{ env.POSTGRES_DB }}
          database-host: ${{ env.DATABASE_HOST }}
          push-image: ${{ (github.event_name == 'push' || inputs.PUSH_IMAGE) && 'true' || 'false' }}
          use-as-latest: "true"

      - name: Notify Slack on Success
        if: success() && secrets.CI_SLACK_WEBHOOK_URL != ''
        uses: slackapi/slack-github-action@v1.24.0
        with:
          payload: |
            {
              "text": ":large_green_circle: Workflow *${{ github.workflow }}* (AMD64) succeeded in job *${{ github.job }}*.\nSee: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
            }
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.CI_SLACK_WEBHOOK_URL }}

      - name: Notify Slack on Failure
        if: failure() && secrets.CI_SLACK_WEBHOOK_URL != ''
        uses: slackapi/slack-github-action@v1.24.0
        with:
          payload: |
            {
              "text": ":red_circle: Workflow *${{ github.workflow }}* (AMD64) failed in job *${{ github.job }}*.\nSee: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
            }
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.CI_SLACK_WEBHOOK_URL }}

  release-arm:
    name: "Release ARM"
    needs: prepare
    runs-on: ubuntu-24.04-arm
    env:
      RELEASE_TAG: ${{ needs.prepare.outputs.release_tag }}
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ needs.prepare.outputs.checkout_ref }}

      - name: Build and test Docker image
        uses: ./.github/actions/docker-build-and-test
        with:
          platform: "arm64"
          platform-suffix: "-arm"
          dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
          dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}
          github-token: ${{ secrets.GITHUB_TOKEN }}
          postgres-user: ${{ env.POSTGRES_USER }}
          postgres-password: ${{ env.POSTGRES_PASSWORD }}
          postgres-db: ${{ env.POSTGRES_DB }}
          database-host: ${{ env.DATABASE_HOST }}
          push-image: ${{ (github.event_name == 'push' || inputs.PUSH_IMAGE) && 'true' || 'false' }}

      - name: Notify Slack on Success
        if: success() && secrets.CI_SLACK_WEBHOOK_URL != ''
        uses: slackapi/slack-github-action@v1.24.0
        with:
          payload: |
            {
              "text": ":large_green_circle: Workflow *${{ github.workflow }}* (ARM) succeeded in job *${{ github.job }}*.\nSee: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
            }
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.CI_SLACK_WEBHOOK_URL }}

      - name: Notify Slack on Failure
        if: failure() && secrets.CI_SLACK_WEBHOOK_URL != ''
        uses: slackapi/slack-github-action@v1.24.0
        with:
          payload: |
            {
              "text": ":red_circle: Workflow *${{ github.workflow }}* (ARM) failed in job *${{ github.job }}*.\nSee: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
            }
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.CI_SLACK_WEBHOOK_URL }}