Owlbot/.gitea/workflows/cd.yml

name: CD

on:
  push:
    tags: ["v*"]

permissions:
  contents: read
  # packages: write  # not yet supported by Gitea

jobs:
  publish-package:
    name: Publish Package
    runs-on: logaldeveloper-archlinux
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - name: Cache uv packages
        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
        with:
          path: ~/.cache/uv
          key: uv-${{ hashFiles('uv.lock') }}

      - name: Install dependencies
        run: uv sync

      - name: Build package
        run: uv build

      - name: Publish package
        run: uv publish
        env:
          UV_PUBLISH_TOKEN: ${{ secrets.REGISTRY_PASSWORD }}

  publish-image:
    name: Publish Image
    runs-on: logaldeveloper-archlinux
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
        with:
          driver-opts: network=host

      - name: Log in to Gitea Container Registry
        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
        with:
          registry: git.logal.dev
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build and push image
        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
        with:
          context: .
          network: host
          push: true
          tags: |
            git.logal.dev/logaldeveloper/owlbot:${{ gitea.ref_name }}
            git.logal.dev/logaldeveloper/owlbot:latest