name: release
on:
  push:
    branches:
      - main

# Declare default permissions as read only.
permissions: read-all

jobs:
  release:
    if: github.repository_owner == 'flutter'
    name: release
    permissions:
      # Release needs to push a tag back to the repo.
      contents: write
    runs-on: ubuntu-latest
    steps:
    - name: "Install Flutter"
      # Github Actions don't support templates so it is hard to share this snippet with another action
      # If we eventually need to use this in more workflow, we could create a shell script that contains this
      # snippet.
      #
      # This uses a pinned version of Flutter rather than `stable` so that it is
      # not subject to out-of-band failures when new releases happen. It does
      # not use the auto-rolled pin because there's no way for the autoroller
      # to test the actual release flow, so changes would still show up in
      # post-submit. A manually-rolled pin means that any changes here must be
      # made deliberately, so that the person updating it knows to watch the
      # next actual auto-release to ensure that it works, and knows to revert
      # the change if it doesn't.
      run: |
        cd $HOME
        git clone https://github.com/flutter/flutter.git --depth 1 -b 3.22.0 _flutter
        echo "$HOME/_flutter/bin" >> $GITHUB_PATH
        cd $GITHUB_WORKSPACE
    # Checks out a copy of the repo.
    - name: Check out code
      uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
      with:
        fetch-depth: 0 # Fetch all history so the tool can get all the tags to determine version.
    - name: Set up tools
      run: dart pub get
      working-directory: ${{ github.workspace }}/script/tool

    # Give some time for LUCI checks to start becoming populated.
    # Because of latency in Github Webhooks, we need to wait for a while
    # before being able to look at checks scheduled by LUCI.
    - name: Give webhooks a minute
      run: sleep 60s
      shell: bash

    # The next step waits for all tests, but when there are issues with the
    # hooks it can take a long time for the tests to even be registered. If
    # "Wait on all tests" runs before that happens, it will pass immediately
    # because there doesn't appear to be anything to wait for. To avoid that,
    # explicitly wait for one LUCI test by name first.
    - name: Wait for test check-in
      uses: lewagon/wait-on-check-action@ccfb013c15c8afb7bf2b7c028fb74dc5a068cccc
      with:
        ref: ${{ github.sha }}
        check-name: 'Linux ci_yaml packages roller'
        repo-token: ${{ secrets.GITHUB_TOKEN }}
        wait-interval: 30 # seconds
        allowed-conclusions: success,neutral
        # verbose:true will produce too many logs that hang github actions web UI.
        verbose: false

    # This workflow should be the last to run. So wait for all the other tests to succeed.
    - name: Wait on all tests
      uses: lewagon/wait-on-check-action@ccfb013c15c8afb7bf2b7c028fb74dc5a068cccc
      with:
        ref: ${{ github.sha }}
        running-workflow-name: 'release'
        repo-token: ${{ secrets.GITHUB_TOKEN }}
        wait-interval: 180 # seconds
        allowed-conclusions: success,neutral
        # verbose:true will produce too many logs that hang github actions web UI.
        verbose: false

    - name: run release
      run: |
        git config --global user.name ${{ secrets.USER_NAME }}
        git config --global user.email ${{ secrets.USER_EMAIL }}
        dart ./script/tool/lib/src/main.dart publish --all-changed --base-sha=HEAD~ --skip-confirmation --remote=origin
      env: {PUB_CREDENTIALS: "${{ secrets.PUB_CREDENTIALS }}"}