release-pipeline.yml

name: "Release: Pipeline"

on:
  release:
    types:
      - released
  workflow_dispatch:
    inputs:
      ref_name:
        description: "Release version X.X.X.postX"
        type: string
        required: true
      release_id:
        description: "GitHub release ID"
        type: string
        required: true

concurrency:
  group: ${{ github.workflow }}-${{ inputs.ref_name || github.ref }}
  cancel-in-progress: true

env:
  HOMEBREW_TAP_REPO: "homebrew-tap"

jobs:
  promote_docker_image:
    name: "Promote"
    permissions:
      contents: read
      checks: read
    uses: ./.github/workflows/docker-release-promote.yml
    with:
      release_tag: ${{ inputs.ref_name || github.ref_name }}
    secrets: inherit

  build_hugging_face_docker_image:
    name: "Build Hugging Face docker image"
    needs:
      - promote_docker_image
    uses: ./.github/workflows/docker-build-ontop.yml
    with:
      base_docker_image_version: ${{ inputs.ref_name || github.ref_name }}
      tags: "hf-latest,hf-${{ inputs.ref_name || github.ref_name }}"
      dockerfile_path: Dockerfile.hgface
      ref: ${{ inputs.ref_name || github.ref_name }}
    secrets: inherit

  jira_set_fix_version:
    name: "Set Jira fix version"
    needs:
      - promote_docker_image
    runs-on: ubuntu-latest
    steps:
      - uses: hmarr/debug-action@v3.0.0

      - name: Checkout Actions Hub
        uses: actions/checkout@v6
        with:
          token: ${{ secrets.GIT_PAT }}
          repository: HumanSignal/actions-hub
          path: ./.github/actions-hub

      - name: Set Jira fix version
        uses: ./.github/actions-hub/actions/jira-set-fix-version
        continue-on-error: true
        with:
          jira_server: "${{ vars.JIRA_SERVER }}"
          jira_username: "${{ secrets.JIRA_USERNAME }}"
          jira_token: "${{ secrets.JIRA_TOKEN }}"
          jira_fix_version: "LS OpenSource/${{ inputs.ref_name || github.ref_name }}"
          jira_fix_version_released: true

  build-pypi:
    name: "Build"
    permissions:
      contents: write
    uses: ./.github/workflows/build_pypi.yml
    with:
      version: ${{ inputs.ref_name || github.ref_name }}
      ref: ${{ inputs.ref_name || github.ref_name }}
      upload_to_pypi: true
      release-id: ${{ inputs.release_id || github.event.release.id }}
    secrets: inherit

  delete-rc-assets:
    name: "Delete Release Candidate Assets"
    runs-on: ubuntu-latest
    needs:
      - build-pypi
    steps:
      - uses: hmarr/debug-action@v3.0.0

      - name: Delete Release Candidate Assets
        uses: actions/github-script@v8
        env:
          RELEASE_ID: "${{ inputs.release_id || github.event.release.id }}"
        with:
          github-token: ${{ secrets.GIT_PAT }}
          script: |
            const { repo, owner } = context.repo;
            const release_id = process.env.RELEASE_ID;
            const rc_regexp = /label[-_]studio-\d+.\d+.\d+rc\d+/;
            const {data: release} = await github.rest.repos.getRelease({
              owner,
              repo,
              release_id,
            });
            for (let asset of release.assets) {
              const match = asset.name.match(rc_regexp)
              if (match) {
                console.log(`Deleting asset ${asset.name}`)
                await github.rest.repos.deleteReleaseAsset({
                  owner,
                  repo,
                  asset_id: asset.id,
                });
              }
            }

  update-homebrew-tap:
    name: "Update Homebrew Tap"
    runs-on: ubuntu-latest
    needs:
      - build-pypi
    steps:
      - uses: hmarr/debug-action@v3.0.0

      - name: DispatchEvent
        uses: actions/github-script@v8
        with:
          github-token: ${{ secrets.GIT_PAT }}
          script: |
            const {repo, owner} = context.repo;
            await github.rest.repos.createDispatchEvent({
              owner: owner,
              repo: '${{ env.HOMEBREW_TAP_REPO }}',
              event_type: 'upstream_formula_update',
              client_payload: {
                formula: 'label-studio',
                version: '${{ inputs.ref_name || github.ref_name }}',
                actor: '${{ github.actor }}',
                url: '${{ needs.build-pypi.outputs.pipy-artifact-url }}',
                sha256: '${{ needs.build-pypi.outputs.pipy-artifact-digests-sha256 }}',
              }
            });

  update-helm-chart:
    name: "Update Helm Chart"
    needs:
      - promote_docker_image
    uses: ./.github/workflows/bump-helm-chart.yml
    with:
      docker_image_version: ${{ inputs.ref_name || github.ref_name }}
    secrets: inherit

  notify_slack_on_failure:
    name: "Notify Slack on Failure"
    needs:
      - promote_docker_image
      - build_hugging_face_docker_image
      - build-pypi
      - delete-rc-assets
      - update-homebrew-tap
      - update-helm-chart
    runs-on: ubuntu-latest
    if: failure()
    steps:
      - name: Send Notification to Slack
        id: slack_notify_ops_release
        uses: slackapi/slack-github-action@v3.0
        with:
          channel-id: '${{ vars.SLACK_CH_RELEASE_TRAIN }}'
          slack-message: |
            One or more steps of Label Studio OpenSource release pipeline got failed! <!subteam^${{ vars.SLACK_GR_DEVOPS }}>

            ><https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}|[Workflow run]>
        env:
          SLACK_BOT_TOKEN: ${{ secrets.SLACK_LSE_BOT_TOKEN }}