ci: reduce workflow failures on forks (denoland#3176)

Publishing packages workflow and deploying to Deno Deploy step runs even
for forks. This is annoying, since it creates some spam every push for
any open PR's.

This PR tries to address this, by skipping certain steps or workflows
unless the current GitHub org is `denoland`, which should be pretty safe
long term.

## Failed workflow spam

<img width="1396" height="635" alt="image"
src="https://github.com/user-attachments/assets/d939d1f5-e736-42a4-9355-f946b3d6ddf2"
/>

<img width="1577" height="905" alt="image"
src="https://github.com/user-attachments/assets/fbf7ffe3-2759-430a-a33e-c8de0d7e113c"
/>

Author: csvn

.github/workflows/deploy.yml

@@ -29,6 +29,8 @@ jobs:
 
       - name: Upload to Deno Deploy
         uses: denoland/deployctl@v1
+        # Skip publishing for forks
+        if: github.repository_owner == 'denoland'
         with:
           project: "fresh"
           entrypoint: "./www/_fresh/server.js"

.github/workflows/publish.yml

@@ -12,6 +12,9 @@ jobs:
       contents: read
       id-token: write
 
+    # Skip publishing for forks
+    if: github.repository_owner == 'denoland'
+
     steps:
       - uses: actions/checkout@v4
 

tests/doc_examples_test.tsx

@@ -0,0 +1,109 @@
+import twDenoJson from "../plugin-tailwindcss/deno.json" with { type: "json" };
+import * as Marked from "marked";
+import { ensureDir, walk } from "@std/fs";
+import { dirname, join, relative } from "@std/path";
+// import { expect } from "@std/expect/expect";
+import { withTmpDir } from "../src/test_utils.ts";
+import { FRESH_VERSION, PREACT_VERSION } from "../update/src/update.ts";
+
+Deno.test("Docs Code example checks", async () => {
+  await using tmp = await withTmpDir();
+
+  for await (const { path, code } of docsMarkdownFiles()) {
+    const codePath = join(tmp.dir, path);
+    await ensureDir(dirname(codePath));
+    await Deno.writeTextFile(codePath, code);
+  }
+
+  const denoJson = {
+    lock: false,
+    imports: {
+      fresh: `jsr:@fresh/core@${FRESH_VERSION}`,
+      "@fresh/plugin-tailwind-v3":
+        `jsr:@fresh/plugin-tailwind@^${twDenoJson.version}`,
+      "@fresh/plugin-tailwind":
+        `jsr:@fresh/plugin-tailwind@^${twDenoJson.version}`,
+      preact: `npm:preact@^${PREACT_VERSION}`,
+      "@deno/gfm": "jsr:@deno/gfm@^0.11.0",
+      "@std/expect": "jsr:@std/expect@^1.0.16",
+    },
+    compilerOptions: {
+      lib: ["dom", "dom.asynciterable", "deno.ns", "deno.unstable"],
+      jsx: "precompile",
+      jsxImportSource: "preact",
+      jsxPrecompileSkipElements: ["a", "img", "source", "body", "html", "head"],
+    },
+  };
+  await Deno.writeTextFile(
+    join(tmp.dir, "deno.json"),
+    JSON.stringify(denoJson, undefined, 2),
+  );
+
+  // Download and cache all dependencies (reduces `stdout` noise)
+  await new Deno.Command(Deno.execPath(), {
+    args: ["cache", "**/*"],
+    cwd: tmp.dir,
+  }).output();
+
+  const { stdout, stderr } = await new Deno.Command(Deno.execPath(), {
+    args: ["check", "**/*"],
+    cwd: tmp.dir,
+  }).output();
+
+  const decoder = new TextDecoder();
+  const output = `${decoder.decode(stdout)}\n${decoder.decode(stderr)}`;
+  // Log `deno check` output (can be removed if expects below are enabled)
+  // deno-lint-ignore no-console
+  console.log(output);
+
+  // TODO: Enable after fixing docs check issues
+  // expect(code).toBe(0);
+  // expect(output).toBe("");
+});
+
+async function* docsMarkdownFiles() {
+  // Limit to checking Fresh v2 (canary) docs for now
+  const docsDir = join(import.meta.dirname!, "..", "docs", "canary");
+  const docsIter = walk(docsDir, { exts: [".md"], includeDirs: false });
+
+  for await (const entry of docsIter) {
+    for (const { file, code } of await extractTsCode(entry.path)) {
+      const path = join(relative(docsDir, entry.path), file);
+      yield { path, code };
+    }
+  }
+}
+
+async function extractTsCode(path: string) {
+  const code: { file: string; code: string }[] = [];
+  const input = await Deno.readTextFile(path);
+  let index = 0;
+
+  const tokens = await Marked.lexer(input, { gfm: true, async: true });
+
+  Marked.walkTokens(tokens, (token) => {
+    // Get rid of `Marked.Tokens.Generic`
+    const t = token as Marked.MarkedToken;
+    if (t.type !== "code") return;
+
+    const result = /^([tj]sx?)\s*/.exec(t.lang ?? "");
+    if (!result) return;
+
+    // Codeblock must be TS/JS
+    index += 1;
+
+    // Probably a filename, but perhaps a title,
+    // so get rid of non-file safe characters
+    const [match, ext] = result;
+    let file = t.lang!.slice(match.length)
+      .toLocaleLowerCase()
+      .replaceAll(/[^a-z0-9._\-\/\\]/g, "_")
+      .replaceAll(/_{2,}/g, "_") || String(index);
+
+    if (!file.endsWith(ext)) file += `.${ext}`;
+
+    code.push({ file, code: t.text });
+  });
+
+  return code;
+}