build-and-publish-pre-release.yml

--- # Build: pre-release package build and publish
# Maintain in repo: funfair-server-template
name: "Build: Pre-Release"

on:
  push:
    branches-ignore:
      - 'release/*'
      - 'hotfix/*'
  pull_request:
    types: [ready_for_review]
    branches:
      - main

# Don't cancel anything in progress
concurrency:
  group: ${{github.workflow}}-${{github.ref}}-pre-release
  cancel-in-progress: false

permissions:
  contents: write
  security-events: write
  pull-requests: write
  id-token: write
  packages: write

jobs:
  # @@required: main
  build-pre-release:

    runs-on: ubuntu-latest

    env:
      # Which NPM Registry to use
      NPM_REGISTRY: ${{vars.NPM_REGISTRY}}
      NPM_CACHE_CERT: ${{vars.NPM_CACHE_CERT}}
      # Nuget caching
      USE_NUGET_CACHE: ${{vars.USE_NUGET_CACHE}}
      NUGET_BAGET_CACHE: ''
      PRERELEASE_BAGET_CACHE: ''
      RELEASE_BAGET_CACHE: ''

    steps:
      - name: "Check Required Secrets"
        shell: bash
        run: |
          if [ -z "${{secrets.SOURCE_PUSH_TOKEN}}" ]; then
            echo "::error::SOURCE_PUSH_TOKEN is required but not set"
            exit 1
          fi

      - name: "Initialise Workspace"
        if: runner.environment == 'self-hosted'
        shell: bash
        run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE"

      - name: "Set Active Environment"
        shell: bash
        run: |
          {
            echo "ACTIVE_RUNNER_NAME=${{runner.name}}"
            echo "ACTIVE_HOSTNAME=$HOSTNAME"
            echo "ACTIVE_USER=$USER"
            echo "TEMP=${{runner.temp}}"
            echo "TMP=${{runner.temp}}"
          } >> "$GITHUB_ENV"

      - name: "Checkout Source"
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ref: ${{github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref}}
          clean: true
          fetch-depth: 0
          fetch-tags: true

      - name: "Setup Build Cache"
        uses: ./.github/actions/setup-build-cache
        with:
          use-nuget-cache: ${{vars.USE_NUGET_CACHE}}
          nuget-baget-cache: ${{vars.NUGET_BAGET_CACHE}}
          prerelease-baget-cache: ${{vars.PRERELEASE_BAGET_CACHE}}
          release-baget-cache: ${{vars.RELEASE_BAGET_CACHE}}
          npm-cache: ${{vars.NPM_CACHE}}

      - name: "Build and deploy"
        uses: ./.github/actions/build
        with:
          production-build: "false"
          npm-production-packager-version: ${{vars.PRODUCTION_PACKAGER_VERSION}}
          npm-content-package-wallet-password: ${{secrets.CONTENT_PACKAGE_WALLET_PASSWORD}}
          npm-package-store-signing-wallet: ${{secrets.PACKAGE_STORE_SIGNING_WALLET}}
          npm-package-store-signing-wallet-password: ${{secrets.PACKAGE_STORE_SIGNING_WALLET_PASSWORD}}
          npm-registry: ${{env.NPM_REGISTRY}}
          npm-cache-cert: ${{env.NPM_CACHE_CERT}}
          nuget-public-restore-feed-cache: ${{env.NUGET_BAGET_CACHE}}
          nuget-public-restore-feed: ${{vars.NUGET_PUBLIC_RESTORE_FEED || 'https://api.nuget.org/v3/index.json'}}
          nuget-additional-restore-feed-release-cache: ${{env.RELEASE_BAGET_CACHE}}
          nuget-additional-restore-feed-release: ${{vars.NUGET_ADDITIONAL_RESTORE_FEED_RELEASE}}
          nuget-additional-restore-feed-prerelease-cache: ${{env.PRERELEASE_BAGET_CACHE}}
          nuget-additional-restore-feed-prerelease: ${{vars.NUGET_ADDITIONAL_RESTORE_FEED_PRERELEASE}}
          nuget-pack: ${{vars.NUGET_PACK}}
          nuget-feed: ${{secrets.NUGET_FEED || 'https://api.nuget.org/v3/index.json'}}
          nuget-feed-type: ${{vars.NUGET_FEED_TYPE}}
          nuget-username: ${{secrets.NUGET_USER_NAME}}
          sleet-config: ${{secrets.SLEET_CONFIG}}
          sleet-feed: ${{vars.PRE_RELEASE_SLEET_FEED}}
          project-to-publish: ${{vars.PROJECT_TO_PUBLISH}}
          docker-app-owner: ${{vars.DOCKER_APP_OWNER}}
          docker-app-name: ${{vars.DOCKER_APP_NAME}}
          build-tag: latest
          cloud-formation-deploy: ${{vars.CLOUD_FORMATION_DEPLOY}}
          cloud-formation-stack: ${{vars.CLOUD_FORMATION_STACK}}
          github-token: ${{secrets.SOURCE_PUSH_TOKEN}}
          aws-access-key-id: ${{secrets.AWS_DOCKER_CONTAINER_REGISTRY_ACCESS_KEY_ID}}
          aws-secret-access-key: ${{secrets.AWS_DOCKER_CONTAINER_REGISTRY_SECRET_ACCESS_KEY}}
          aws-region: ${{vars.AWS_REGION}}
          docker-container-registry: ${{vars.DOCKER_CONTAINER_REGISTRY_PRE_RELEASE}}
          aws-load-balancer-hostname: ${{vars.AWS_LOAD_BALANCER_HOSTNAME_DEV}}
          aws-load-balancer-priority: ${{vars.AWS_LOAD_BALANCER_PRIORITY_DEV}}
          api-host: ${{vars.AWS_LOAD_BALANCER_HOSTNAME_DEV}}
          api-prefix: ${{vars.API_PREFIX}}
          docker-username: ${{secrets.DOCKER_USERNAME}}
          docker-access-token: ${{secrets.DOCKER_ACCESS_TOKEN}}
          dotnet-docker-platform: ${{vars.DOTNET_DOCKER_PLATFORM}}
          dotnet-container-platform: ${{vars.DOTNET_CONTAINER_PLATFORM}}
          sql-server: "${{vars.SQL_SERVER}}"
          sql-db: "${{vars.SQL_DB}}"
          sql-user: "${{vars.SQL_USER}}"
          sql-password: "${{secrets.SQL_PASSWORD}}"
          create-release: false

      - name: "Build Version"
        shell: bash
        env:
          BUILD_VERSION: ${{env.BUILD_VERSION}}
        run: |
          echo "::notice::Version: $BUILD_VERSION"