|
| 1 | +name: Promote Release - Merge on QA Pass and Publish |
| 2 | + |
| 3 | +on: |
| 4 | + pull_request: |
| 5 | + types: [labeled, synchronize, reopened, ready_for_review] |
| 6 | + branches: |
| 7 | + - master |
| 8 | + pull_request_review: |
| 9 | + types: [submitted] |
| 10 | + branches: |
| 11 | + - master |
| 12 | + |
| 13 | +concurrency: |
| 14 | + group: promote-release-${{ github.event.pull_request.number || github.run_id }} |
| 15 | + cancel-in-progress: true |
| 16 | + |
| 17 | +jobs: |
| 18 | + gate-and-merge: |
| 19 | + name: 🔐 Gate, Verify Checks, and Merge |
| 20 | + if: >- |
| 21 | + ${ { github.event.pull_request.head.ref } } == '' || startsWith(github.event.pull_request.head.ref, 'releases/') |
| 22 | + runs-on: ubuntu-latest |
| 23 | + permissions: |
| 24 | + contents: write |
| 25 | + pull-requests: write |
| 26 | + checks: read |
| 27 | + statuses: read |
| 28 | + outputs: |
| 29 | + merged: ${{ steps.merge.outputs.merged }} |
| 30 | + version: ${{ steps.version.outputs.version }} |
| 31 | + steps: |
| 32 | + - name: 🧠 Evaluate conditions |
| 33 | + id: eval |
| 34 | + uses: actions/github-script@v7 |
| 35 | + with: |
| 36 | + script: | |
| 37 | + const core = require('@actions/core'); |
| 38 | + const pr = context.payload.pull_request || (await github.rest.pulls.get({owner: context.repo.owner, repo: context.repo.repo, pull_number: context.payload.pull_request?.number || context.issue.number})).data; |
| 39 | + if (!pr) core.setFailed('No PR context'); |
| 40 | + const hasLabel = pr.labels.some(l => l.name === 'pass QA ready for deploy'); |
| 41 | + if (!hasLabel) core.setFailed('Required label not present: pass QA ready for deploy'); |
| 42 | + // Check approvals |
| 43 | + const reviews = await github.rest.pulls.listReviews({owner: context.repo.owner, repo: context.repo.repo, pull_number: pr.number}); |
| 44 | + const approved = reviews.data.some(r => r.state === 'APPROVED'); |
| 45 | + if (!approved) core.setFailed('No approval found on the PR'); |
| 46 | + core.setOutput('pr_number', pr.number.toString()); |
| 47 | + - name: ⏳ Wait for required status checks to pass |
| 48 | + uses: actions/github-script@v7 |
| 49 | + with: |
| 50 | + script: | |
| 51 | + const prNumber = Number(core.getInput('pr_number', { required: false })) || ${{ steps.eval.outputs.pr_number || '0' }}; |
| 52 | + const { data: pr } = await github.rest.pulls.get({ owner: context.repo.owner, repo: context.repo.repo, pull_number: prNumber }); |
| 53 | + const ref = pr.head.sha; |
| 54 | + const start = Date.now(); |
| 55 | + const timeoutMs = 60*60*1000; // 60 minutes |
| 56 | + const sleep = ms => new Promise(r => setTimeout(r, ms)); |
| 57 | + while (true) { |
| 58 | + const { data: combined } = await github.rest.repos.getCombinedStatusForRef({ owner: context.repo.owner, repo: context.repo.repo, ref }); |
| 59 | + const checksOk = combined.state === 'success'; |
| 60 | + if (checksOk) break; |
| 61 | + if (Date.now() - start > timeoutMs) throw new Error('Timeout waiting for status checks to pass'); |
| 62 | + core.info(`Waiting for checks. Current state: ${combined.state}`); |
| 63 | + await sleep(15000); |
| 64 | + } |
| 65 | + - name: 📥 Checkout |
| 66 | + uses: actions/checkout@v4 |
| 67 | + with: |
| 68 | + fetch-depth: 0 |
| 69 | + - name: 🔀 Merge PR immediately |
| 70 | + id: merge |
| 71 | + uses: actions/github-script@v7 |
| 72 | + with: |
| 73 | + script: | |
| 74 | + const prNumber = Number(${ { steps.eval.outputs.pr_number } }); |
| 75 | + const { data: pr } = await github.rest.pulls.get({ owner: context.repo.owner, repo: context.repo.repo, pull_number: prNumber }); |
| 76 | + if (pr.merged) { core.setOutput('merged', 'true'); return; } |
| 77 | + const method = 'merge'; // use repo default merge method |
| 78 | + await github.rest.pulls.merge({ owner: context.repo.owner, repo: context.repo.repo, pull_number: pr.number, merge_method: method }); |
| 79 | + core.setOutput('merged', 'true'); |
| 80 | + - name: 📝 Read version from pubspec on master |
| 81 | + id: version |
| 82 | + run: | |
| 83 | + git fetch origin master:master |
| 84 | + git checkout master |
| 85 | + VER=$(grep '^version:' pubspec.yaml | sed 's/version: //' | tr -d ' ') |
| 86 | + echo "version=$VER" >> $GITHUB_OUTPUT |
| 87 | +
|
| 88 | + call-production: |
| 89 | + name: 🚀 Production Release |
| 90 | + needs: gate-and-merge |
| 91 | + if: needs.gate-and-merge.outputs.merged == 'true' |
| 92 | + uses: ./.github/workflows/production-release.yml |
| 93 | + with: |
| 94 | + version: ${{ needs.gate-and-merge.outputs.version }} |
| 95 | + skip_tests: false |
| 96 | + dry_run: false |
| 97 | + secrets: inherit |
0 commit comments