release.yml

name: release

# Runs when a tag v* is pushed (stable release) or on the daily schedule /
# manual dispatch on main (Marketplace and Open VSX pre-release).
# Stable and pre-release publishing live in a single workflow file so Open VSX
# Trusted Publishing (which allows one workflow file per extension) covers both.

on:
  push:
    tags:
      - "v*"
  schedule:
    - cron: '23 3 * * *'
  workflow_dispatch:

concurrency:
  group: ${{ github.event_name == 'push' && format('stable-publishing-{0}', github.ref) || 'marketplace-pre-release' }}
  cancel-in-progress: false

permissions:
  contents: read
  actions: read

jobs:
  check-version:
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
      - name: Check stable version and release tag
        env:
          RELEASE_TAG: ${{ github.ref_name }}
        run: node .github/scripts/extension-version.js check-stable "$RELEASE_TAG"

  verify:
    needs: check-version
    uses: ./.github/workflows/main.yml

  release:
    name: Release
    if: github.event_name == 'push'
    env:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    # Independent of the registry jobs so the VSIX stays available as a
    # fallback when a registry is down.
    needs: verify
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Download artifacts
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          name: vscode-R.vsix
          path: artifacts/
      - name: Create release
        run: |
          VERSION=${GITHUB_REF#refs/tags/v}
          ASSET="r-$VERSION.vsix"
          mv artifacts/vscode-R.vsix "artifacts/$ASSET"
          if RELEASE=$(gh release view "v$VERSION" --json isDraft,assets 2>/dev/null); then
            # A previous attempt may have created the release without the asset.
            # Keep a completed asset: --clobber deletes it before uploading, so
            # a failed upload would remove the existing download.
            if jq -e --arg name "$ASSET" \
              '.assets | any(.name == $name and .state == "uploaded")' \
              <<<"$RELEASE" >/dev/null; then
              echo "Release v$VERSION already has $ASSET; skipping the upload."
            else
              echo "Release v$VERSION already exists; uploading $ASSET."
              # --clobber replaces an incomplete asset with the same name.
              gh release upload "v$VERSION" "artifacts/$ASSET" --clobber
            fi
            # gh release create uploads assets to a draft before publishing it,
            # so an interrupted attempt can leave the release as a draft.
            if [ "$(jq -r .isDraft <<<"$RELEASE")" = "true" ]; then
              echo "Release v$VERSION is a draft; publishing it."
              gh release edit "v$VERSION" --draft=false
            fi
          else
            gh release create "v$VERSION" "artifacts/$ASSET" \
              --title "v$VERSION" \
              --notes "Release v$VERSION" \
              --generate-notes
          fi

  publish-vs-marketplace:
    name: Publish to Visual Studio Marketplace
    if: github.event_name == 'push'
    environment: vs-marketplace
    permissions:
      contents: read
      id-token: write
    timeout-minutes: 30
    runs-on: ubuntu-latest
    needs: verify
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
          cache: 'pnpm'
      - run: pnpm install --frozen-lockfile
      - name: Download artifacts
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          name: vscode-R.vsix
          path: artifacts/
      - name: Publish to Visual Studio Marketplace
        run: pnpm exec vsce publish --oidc --skip-duplicate --packagePath artifacts/*.vsix

  publish-open-vsx:
    name: Publish to Open VSX Registry
    if: github.event_name == 'push'
    environment: open-vsx
    permissions:
      contents: read
      id-token: write
    timeout-minutes: 30
    runs-on: ubuntu-latest
    needs: verify
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
          cache: 'pnpm'
      - run: pnpm install --frozen-lockfile
      - name: Download artifacts
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          name: vscode-R.vsix
          path: artifacts/
      - name: Publish to Open VSX Registry
        run: pnpm exec ovsx publish --trusted-publishing --skip-duplicate --packagePath artifacts/*.vsix

  prerelease-prepare:
    if: github.event_name != 'push' && github.repository == 'REditorSupport/vscode-R' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    outputs:
      publish: ${{ steps.previous.outputs.publish }}
      date: ${{ steps.previous.outputs.date }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
      - name: Check publication history
        id: previous
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          node .github/scripts/marketplace-pre-release-history.js

  prerelease-verify:
    needs: prerelease-prepare
    if: needs.prerelease-prepare.outputs.publish == 'true'
    uses: ./.github/workflows/main.yml
    with:
      prerelease-date: ${{ needs.prerelease-prepare.outputs.date }}

  prerelease-publish-vs-marketplace:
    environment: vs-marketplace
    permissions:
      actions: read
      contents: read
      id-token: write
    needs:
      - prerelease-prepare
      - prerelease-verify
    if: github.event_name != 'push' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
          cache: 'pnpm'
      - run: pnpm install --frozen-lockfile
      - name: Download verified pre-release
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          name: vscode-R.vsix
          path: artifacts/
      - name: Recheck publication eligibility
        id: eligibility
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node .github/scripts/marketplace-pre-release-history.js
      - name: Publish to Visual Studio Marketplace
        if: steps.eligibility.outputs.publish == 'true'
        run: pnpm exec vsce publish --oidc --pre-release --skip-duplicate --packagePath artifacts/vscode-R.vsix

  prerelease-publish-open-vsx:
    environment: open-vsx
    permissions:
      actions: read
      contents: read
      id-token: write
    needs:
      - prerelease-prepare
      - prerelease-verify
    if: github.event_name != 'push' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: 24
          cache: 'pnpm'
      - run: pnpm install --frozen-lockfile
      - name: Download verified pre-release
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          name: vscode-R.vsix
          path: artifacts/
      - name: Recheck publication eligibility
        id: eligibility
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: node .github/scripts/marketplace-pre-release-history.js
      - name: Publish to Open VSX Registry
        if: steps.eligibility.outputs.publish == 'true'
        run: pnpm exec ovsx publish --trusted-publishing --skip-duplicate --packagePath artifacts/vscode-R.vsix