Skip to content

chore: gate release publishing behind environment #169

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
marandaneto wants to merge 1 commit into from
Closed

chore: gate release publishing behind environment #169

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
143 changes: 69 additions & 74 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,9 +61,11 @@ jobs:
environment: "Release"
permissions:
contents: write
id-token: write
outputs:
commit-hash: ${{ steps.commit-version-bump.outputs.commit-hash }}
new-version: ${{ steps.apply-changesets.outputs.new-version }}
published: ${{ steps.release-outputs.outputs.published }}
steps:
- name: Notify Slack - Approved
if: needs.notify-approval-needed.outputs.slack_ts != ''
Expand Down Expand Up @@ -140,122 +142,76 @@ jobs:
env:
GITHUB_TOKEN: ${{ steps.releaser.outputs.token }}

- name: Notify Slack - Failed
if: ${{ failure() && needs.notify-approval-needed.outputs.slack_ts != '' }}
uses: posthog/.github/.github/actions/slack-thread-reply@5fc4680761e8ac29a61b212756230eba0e276d8c
with:
slack_bot_token: ${{ secrets.SLACK_CLIENT_LIBRARIES_BOT_TOKEN }}
slack_channel_id: ${{ vars.SLACK_APPROVALS_CLIENT_LIBRARIES_CHANNEL_ID }}
thread_ts: ${{ needs.notify-approval-needed.outputs.slack_ts }}
message: "❌ Failed to bump version for `posthog-ruby@${{ steps.apply-changesets.outputs.new-version }}`! <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View logs>"
emoji_reaction: "x"

notify-rejected:
name: Notify Slack - Rejected
needs: [version-bump, notify-approval-needed]
runs-on: ubuntu-latest
if: always() && needs.version-bump.result == 'failure' && needs.notify-approval-needed.outputs.slack_ts != ''
steps:
- name: Check for rejection
id: check-rejection
- name: Sync checkout to release commit
if: steps.commit-version-bump.outputs.commit-hash != ''
env:
GH_TOKEN: ${{ github.token }}
COMMIT_HASH: ${{ steps.commit-version-bump.outputs.commit-hash }}
run: |
RESPONSE=$(gh api /repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/approvals)
REJECTED=$(echo "$RESPONSE" | jq '[.[] | select(.state == "rejected")] | length')
if [ "$REJECTED" -gt 0 ]; then
echo "was_rejected=true" >> "$GITHUB_OUTPUT"
COMMENT=$(echo "$RESPONSE" | jq -r '.[] | select(.state == "rejected") | .comment // empty' | head -1)
if [ -n "$COMMENT" ]; then
{
echo 'message<<EOF'
echo "🚫 Release was rejected: $COMMENT"
echo 'EOF'
} >> "$GITHUB_OUTPUT"
else
echo "message=🚫 Release was rejected." >> "$GITHUB_OUTPUT"
fi
else
echo "was_rejected=false" >> "$GITHUB_OUTPUT"
fi
git fetch origin main
git reset --hard "$COMMIT_HASH"

- name: Notify Slack - Rejected
if: steps.check-rejection.outputs.was_rejected == 'true'
uses: posthog/.github/.github/actions/slack-thread-reply@5fc4680761e8ac29a61b212756230eba0e276d8c
with:
slack_bot_token: ${{ secrets.SLACK_CLIENT_LIBRARIES_BOT_TOKEN }}
slack_channel_id: ${{ vars.SLACK_APPROVALS_CLIENT_LIBRARIES_CHANNEL_ID }}
thread_ts: ${{ needs.notify-approval-needed.outputs.slack_ts }}
message: '${{ steps.check-rejection.outputs.message }}'
emoji_reaction: "no_entry_sign"

publish:
name: Release and publish
needs: [version-bump, notify-approval-needed]
runs-on: ubuntu-latest
if: always() && needs.version-bump.outputs.commit-hash != ''
permissions:
contents: write
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
ref: main
fetch-depth: 0

- name: Configure Git
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"

- name: Set up Ruby
- name: Set up Ruby for publishing
if: steps.commit-version-bump.outputs.commit-hash != ''
uses: ruby/setup-ruby@319994f95fa847cf3fb3cd3dbe89f6dcde9f178f # v1.295.0
with:
ruby-version: ruby
bundler: 4.0.13
bundler-cache: true

- name: Configure trusted publishing credentials
if: steps.commit-version-bump.outputs.commit-hash != ''
uses: rubygems/configure-rubygems-credentials@bc6dd217f8a4f919d6835fcfefd470ef821f5c44 # v1.0.0

- name: Build posthog-ruby
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem build posthog-ruby.gemspec

- name: Publish posthog-ruby
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem push posthog-ruby-*.gem

- name: Wait for posthog-ruby to be available
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem exec rubygems-await posthog-ruby-*.gem

- name: Build posthog-rails
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem build posthog-rails.gemspec
working-directory: posthog-rails

- name: Publish posthog-rails
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem push posthog-rails/posthog-rails-*.gem

- name: Wait for posthog-rails to be available
if: steps.commit-version-bump.outputs.commit-hash != ''
run: gem exec rubygems-await posthog-rails/posthog-rails-*.gem

- name: Tag repository
if: steps.commit-version-bump.outputs.commit-hash != ''
env:
NEW_VERSION: ${{ needs.version-bump.outputs.new-version }}
COMMIT_HASH: ${{ needs.version-bump.outputs.commit-hash }}
NEW_VERSION: ${{ steps.apply-changesets.outputs.new-version }}
COMMIT_HASH: ${{ steps.commit-version-bump.outputs.commit-hash }}
run: |
git tag -a "$NEW_VERSION" "$COMMIT_HASH" -m "$NEW_VERSION"
git push origin "$NEW_VERSION"

- name: Create GitHub Release
if: steps.commit-version-bump.outputs.commit-hash != ''
env:
GH_TOKEN: ${{ github.token }}
NEW_VERSION: ${{ needs.version-bump.outputs.new-version }}
NEW_VERSION: ${{ steps.apply-changesets.outputs.new-version }}
run: |
CHANGELOG_ENTRY=$(awk -v defText="see CHANGELOG.md" '/^## /{if (flag) exit; flag=1; next} flag; END{if (!flag) print defText}' CHANGELOG.md | sed '/[^[:space:]]/,$!d' | tac | sed '/[^[:space:]]/,$!d' | tac)
gh release create "$NEW_VERSION" \
--title "$NEW_VERSION" \
--notes "$CHANGELOG_ENTRY"

- name: Set release outputs
id: release-outputs
if: steps.commit-version-bump.outputs.commit-hash != ''
run: echo "published=true" >> "$GITHUB_OUTPUT"

- name: Send failure event to PostHog
if: ${{ failure() }}
uses: PostHog/posthog-github-action@58dea254b598fb5d469c0699c98af8288a7f7650 # v1.2.0
Expand All @@ -267,7 +223,7 @@ jobs:
"commitSha": "${{ github.sha }}",
"jobStatus": "${{ job.status }}",
"ref": "${{ github.ref }}",
"version": "${{ needs.version-bump.outputs.new-version }}"
"version": "${{ steps.apply-changesets.outputs.new-version }}"
}

- name: Notify Slack - Failed
Expand All @@ -277,14 +233,53 @@ jobs:
slack_bot_token: ${{ secrets.SLACK_CLIENT_LIBRARIES_BOT_TOKEN }}
slack_channel_id: ${{ vars.SLACK_APPROVALS_CLIENT_LIBRARIES_CHANNEL_ID }}
thread_ts: ${{ needs.notify-approval-needed.outputs.slack_ts }}
message: "❌ Failed to release `posthog-ruby@${{ needs.version-bump.outputs.new-version }}`! <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View logs>"
message: "❌ Failed to release `posthog-ruby@${{ steps.apply-changesets.outputs.new-version }}`! <https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|View logs>"
emoji_reaction: "x"

notify-rejected:
name: Notify Slack - Rejected
needs: [version-bump, notify-approval-needed]
runs-on: ubuntu-latest
if: always() && needs.version-bump.result == 'failure' && needs.notify-approval-needed.outputs.slack_ts != ''
steps:
- name: Check for rejection
id: check-rejection
env:
GH_TOKEN: ${{ github.token }}
run: |
RESPONSE=$(gh api /repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/approvals)
REJECTED=$(echo "$RESPONSE" | jq '[.[] | select(.state == "rejected")] | length')
if [ "$REJECTED" -gt 0 ]; then
echo "was_rejected=true" >> "$GITHUB_OUTPUT"
COMMENT=$(echo "$RESPONSE" | jq -r '.[] | select(.state == "rejected") | .comment // empty' | head -1)
if [ -n "$COMMENT" ]; then
{
echo 'message<<EOF'
echo "🚫 Release was rejected: $COMMENT"
echo 'EOF'
} >> "$GITHUB_OUTPUT"
else
echo "message=🚫 Release was rejected." >> "$GITHUB_OUTPUT"
fi
else
echo "was_rejected=false" >> "$GITHUB_OUTPUT"
fi

- name: Notify Slack - Rejected
if: steps.check-rejection.outputs.was_rejected == 'true'
uses: posthog/.github/.github/actions/slack-thread-reply@5fc4680761e8ac29a61b212756230eba0e276d8c
with:
slack_bot_token: ${{ secrets.SLACK_CLIENT_LIBRARIES_BOT_TOKEN }}
slack_channel_id: ${{ vars.SLACK_APPROVALS_CLIENT_LIBRARIES_CHANNEL_ID }}
thread_ts: ${{ needs.notify-approval-needed.outputs.slack_ts }}
message: '${{ steps.check-rejection.outputs.message }}'
emoji_reaction: "no_entry_sign"

notify-released:
name: Notify Slack - Released
needs: [version-bump, publish, notify-approval-needed]
needs: [version-bump, notify-approval-needed]
runs-on: ubuntu-latest
if: always() && needs.publish.result == 'success' && needs.notify-approval-needed.outputs.slack_ts != ''
if: always() && needs.version-bump.result == 'success' && needs.version-bump.outputs.published == 'true' && needs.notify-approval-needed.outputs.slack_ts != ''
steps:
- name: Notify Slack - Released
uses: posthog/.github/.github/actions/slack-thread-reply@5fc4680761e8ac29a61b212756230eba0e276d8c
Expand Down
Loading