name: release
on:
  push:
    branches:
      - main

# Declare default permissions as read only.
permissions: read-all

jobs:
  release:
    if: github.repository_owner == 'flutter'
    name: release
    permissions:
      # Release needs to push a tag back to the repo.
      contents: write
    runs-on: ubuntu-latest
    steps:
    # Checks out a copy of the repo.
    - name: Check out code
      uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
      with:
        fetch-depth: 0 # Fetch all history so the tool can get all the tags to determine version.
        persist-credentials: false
    - name: "Install Flutter"
      uses: ./.github/workflows/internals/install_flutter
    - name: Set up tools
      run: dart pub get
      working-directory: ${{ github.workspace }}/script/tool

    # Give some time for LUCI checks to start becoming populated.
    # Because of latency in Github Webhooks, we need to wait for a while
    # before being able to look at checks scheduled by LUCI.
    - name: Give webhooks a minute
      run: sleep 60s
      shell: bash

    # The next step waits for all tests, but when there are issues with the
    # hooks it can take a long time for the tests to even be registered. If
    # "Wait on all tests" runs before that happens, it will pass immediately
    # because there doesn't appear to be anything to wait for. To avoid that,
    # explicitly wait for one LUCI test by name first.
    - name: Wait for test check-in
      uses: lewagon/wait-on-check-action@96d9100b431964d10e0136aff8b9ccb92470505e
      with:
        ref: ${{ github.sha }}
        check-name: 'Linux ci_yaml packages roller'
        repo-token: ${{ secrets.GITHUB_TOKEN }}
        wait-interval: 30 # seconds
        allowed-conclusions: success,neutral
        # verbose:true will produce too many logs that hang github actions web UI.
        verbose: false

    # This workflow should be the last to run. So wait for all the other tests to succeed.
    - name: Wait on all tests
      uses: lewagon/wait-on-check-action@96d9100b431964d10e0136aff8b9ccb92470505e
      with:
        ref: ${{ github.sha }}
        running-workflow-name: 'release'
        repo-token: ${{ secrets.GITHUB_TOKEN }}
        wait-interval: 180 # seconds
        allowed-conclusions: success,neutral
        # verbose:true will produce too many logs that hang github actions web UI.
        verbose: false

    - name: run release
      run: |
        gh auth setup-git
        git config --global user.name ${{ secrets.USER_NAME }}
        git config --global user.email ${{ secrets.USER_EMAIL }}
        dart ./script/tool/lib/src/main.dart publish --all-changed --base-sha=HEAD~ --skip-confirmation --remote=origin
      env:
        PUB_CREDENTIALS: "${{ secrets.PUB_CREDENTIALS }}"
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}