deno-ci.yaml

name: CI

on:
  push:
    branches: [ main ]
  pull_request: {}

jobs:

  check:
    name: Check w/ ${{ matrix.deno-version }}
    runs-on: ubuntu-latest
    permissions:
      contents: read

    strategy:
      matrix:
        deno-version:
        - v2.3
        - canary
      fail-fast: false # run each branch to completion

    steps:
    - name: Checkout source
      uses: actions/checkout@v5

    - name: Use Deno ${{ matrix.deno-version }}
      uses: denoland/setup-deno@v2
      with:
        deno-version: ${{ matrix.deno-version }}

    # "https" cache: code from the Internet
    - name: Cache https://
      uses: actions/cache@v4
      with:
        path: |
          ~/.cache/deno/remote/https
          ~/.cache/deno/gen/https
        key: deno-https/v2-${{ github.sha }}
        restore-keys: deno-https/v2-

    - name: Check mod.ts
      run: time deno check mod.ts

    - name: Ensure jsr.json is clean
      run: time hack/update-jsr.sh

    - name: Check publish rules
      run: time deno publish --dry-run

  publish:
    runs-on: ubuntu-latest
    needs: check
    if: github.event_name == 'push'

    permissions:
      contents: read
      id-token: write

    steps:
    - uses: denoland/setup-deno@v2

    - uses: actions/checkout@v5

    - name: Publish now
      run: deno publish