build-release.yml

name: build-release
on:
  pull_request:
    types:
      - opened
      - reopened
      - edited
      - synchronize
  push:
    branches:
      - 'main'
    paths:
      - 'stencil.yaml'
      - 'manifest.yaml'
      - '.mise.toml'
      - '.github/workflows/build-release.yml'
      - 'templates/**'
      - 'tests/**'

jobs:
  build-and-test:
    name: Build and Test
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
      actions: read
    steps:
      ## <<Stencil::Block(getMoreCiSecrets)>>

      ## <</Stencil::Block>>
      - name: Checkout
        uses: actions/checkout@v4
        with:
          persist-credentials: false
          # These two required for builds to successfully amend commits
          ref: ${{ github.head_ref }}
          fetch-depth: 2
      - name: Install Tool Versions
        uses: jdx/mise-action@f8dfbcc150159126838e44b882bf34bd98fd90f3
        with:
          experimental: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Install Stencil
        uses: rgst-io/stencil-action@34abb7be7ca3847f233bd9c38f1da71b30556c35
        with:
          github-token: ${{ github.token }}
          version: 'latest'
      ## <<Stencil::Block(buildtestauth)>>

      ## <</Stencil::Block>>
      - name: Build Test repo
        run: mise run buildtest
        # Fill in env: -> GITHUB_TOKEN here if you need a custom token to read module dependencies
        ## <<Stencil::Block(buildTestEnvVars)>>

        ## <</Stencil::Block>>
      - name: Run Tests
        run: mise run runtest
        # Fill in env: -> GITHUB_TOKEN here if you need a custom token to read module dependencies
        ## <<Stencil::Block(runTestEnvVars)>>

        ## <</Stencil::Block>>
      ## <<Stencil::Block(buildteststeps)>>

      ## <</Stencil::Block>>

  build-release:
    name: Build and Release
    if: ${{ github.ref == 'refs/heads/main' }} # Only run on main branch commits
    needs: build-and-test
    runs-on: ubuntu-latest
    permissions: write-all
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Set git User
        run: |
          git config user.name github-actions
          git config user.email github-actions@github.com
      - name: Install Tool Versions
        uses: jdx/mise-action@f8dfbcc150159126838e44b882bf34bd98fd90f3
        with:
          experimental: true
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Install Semantic-Release
        run: yarn install
      - name: Release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: npx semantic-release

  ## <<Stencil::Block(extraActions)>>

  ## <</Stencil::Block>>