release.yml

name: Release Buildpack

on:
  # Auto-trigger when the "Prepare release" PR (created by the
  # _buildpacks-prepare-release.yml workflow) is merged.
  pull_request:
    branches:
      - main
    types:
      - closed
  workflow_dispatch:
    inputs:
      dry_run:
        description: Execute the release workflow but skip any steps that publish (for testing purposes)
        type: boolean
        default: false

# Disable all GITHUB_TOKEN permissions, since the GitHub App token is used instead.
permissions: {}

jobs:
  release:
    name: Release
    # On `pull_request`, only run for the merged auto-generated
    # "Prepare release" PR (branch name set by
    # _buildpacks-prepare-release.yml). Manual dispatches always run.
    if: >-
      github.event_name == 'workflow_dispatch' ||
      (github.event.pull_request.merged == true &&
       github.event.pull_request.head.repo.full_name == github.repository &&
       github.event.pull_request.head.ref == 'prepare-release' &&
       github.event.pull_request.user.login == 'heroku-linguist[bot]')
    uses: heroku/languages-github-actions/.github/workflows/_buildpacks-release.yml@latest
    with:
      app_id: ${{ vars.LINGUIST_GH_APP_ID }}
      dry_run: ${{ inputs.dry_run || false }}
      reviewers: 'edmorley'
    secrets:
      app_private_key: ${{ secrets.LINGUIST_GH_PRIVATE_KEY }}
      cnb_registry_token: ${{ secrets.CNB_REGISTRY_RELEASE_BOT_GITHUB_TOKEN }}
      docker_hub_user: ${{ secrets.DOCKER_HUB_USER }}
      docker_hub_token: ${{ secrets.DOCKER_HUB_TOKEN }}