name: CD

on:
  push:
    tags: ["v*"]

permissions:
  contents: read
  # packages: write  # not yet supported by Gitea

env:
  UV_PYTHON_DOWNLOADS: never

jobs:
  publish-package:
    name: Publish Package
    runs-on: logaldeveloper-archlinux
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - name: Install dependencies
        run: uv sync --locked

      - name: Build package
        run: uv build

      - name: Publish package
        run: uv publish
        env:
          UV_PUBLISH_TOKEN: ${{ secrets.REGISTRY_PASSWORD }}

  publish-image:
    name: Publish Image
    runs-on: logaldeveloper-archlinux
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          driver-opts: network=host

      - name: Log in to Gitea Container Registry
        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          registry: git.logal.dev
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build and push image
        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          network: host
          push: true
          tags: |
            git.logal.dev/logaldeveloper/owlbot:${{ gitea.ref_name }}
            git.logal.dev/logaldeveloper/owlbot:latest