publish.yml

name: Publish

on:
  workflow_dispatch: 
    inputs: 
      version:
        description: 'Version to publish'
        required: true
    
permissions:
  contents: write

jobs:
  create-draft-release:
    name: Create Draft Release
    runs-on: ubuntu-latest

    steps:
      - uses: softprops/action-gh-release@v2
        with:
          draft: true
          prerelease: true
          generate_release_notes: true
          name: ${{ github.event.inputs.version }}
          tag_name: ${{ github.event.inputs.version }}

  build-windows:
    name: Build (${{ matrix.rid }})
    runs-on: windows-latest
    environment: release

    needs: [create-draft-release]

    strategy:
      matrix:
        rid: [win-x64]

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-dotnet@v4
        with:
          dotnet-version: '8.0.x'

      - id: import-cert
        name: Import Code Signing Certificate
        shell: pwsh
        run: |
          $data = [System.Convert]::FromBase64String($env:CertificateContents)
          $path = [System.IO.Path]::Combine($env:RUNNER_TEMP, 'certificate.pfx')
          
          Set-Content -Path $path -Value $data -AsByteStream
          echo "certPath=$path" >> $env:GITHUB_OUTPUT
        env:
          CertificateContents: ${{ secrets.CODESIGN_CERTIFICATE }}

      - id: deploytool
        name: Download Deployment Tool
        shell: pwsh
        run: |
          $zipPath = [System.IO.Path]::Combine($env:TEMP, 'onionfruit-deploy.zip')
          $deployToolHome = [System.IO.Path]::Combine($env:TEMP, 'onionfruit-deploy')
          
          Invoke-WebRequest -Uri https://github.com/dragonfruitnetwork/onionfruit-deploy/releases/latest/download/onionfruit-deploy.zip -OutFile $zipPath
          Expand-Archive -Path $zipPath -DestinationPath $deployToolHome
          
          Copy-Item -Path oniondeploy.xml -Destination $deployToolHome

          echo "home=$deployToolHome" >> $env:GITHUB_OUTPUT

      - name: Restore .NET Tools
        run: dotnet tool restore
        
      - name: Restore NuGet Packages
        run: dotnet restore

      - name: Update nuget-licenses.json
        run: dotnet tool run nuget-license -o JsonPretty -ji DragonFruit.OnionFruit.Windows/nuget-license-sources.json | Out-File -FilePath DragonFruit.OnionFruit/Assets/nuget-licenses.json -Encoding utf8
        continue-on-error: true

      - name: Run deployment tool
        working-directory: ${{ steps.deploytool.outputs.home }}
        run: dotnet DragonFruit.OnionFruit.Deploy.dll ${{ github.workspace }}\DragonFruit.OnionFruit.Windows\DragonFruit.OnionFruit.Windows.csproj ${{ matrix.rid }} "${{ github.event.inputs.version }}"
        env:
          ONIONDEPLOY_GitHub__Token: ${{ github.token }}
          ONIONDEPLOY_CodeSign__Password: ${{ secrets.CODESIGN_PASSWORD }}
          ONIONDEPLOY_CodeSign__Certificate: ${{ steps.import-cert.outputs.certPath }}

  copy-legacy:
    name: Copy legacy updater files
    runs-on: ubuntu-latest

    needs: [build-windows]

    steps:
        - name: Download release assets
          run: |
            curl -s -H "Authorization: token ${{ github.token }}" -H "Accept: application/vnd.github.v3+json" https://api.github.com/repos/dragonfruitnetwork/onionfruit/releases/latest \
            | jq -r '.assets[] | select(.name | endswith(".nupkg") or . == "RELEASES") | .browser_download_url' \
            | xargs -n 1 curl -L -O -J

        - name: Upload release assets
          uses: softprops/action-gh-release@v2
          with:
            tag_name: ${{ github.event.inputs.version }}
            files: |
              *.nupkg
              RELEASES