dev-release.yml

name: Dev Release

on:
  push:
    branches:
      - dev

permissions:
  contents: write

concurrency:
  group: dev-release-${{ github.sha }}
  cancel-in-progress: false

jobs:
  create-release:
    name: Create draft prerelease
    runs-on: ubuntu-latest
    outputs:
      release_id: ${{ steps.release.outputs.release_id }}
      tag: ${{ steps.release.outputs.tag }}
      version: ${{ steps.release.outputs.version }}

    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
        with:
          ref: ${{ github.sha }}

      - name: Install Rust toolchain
        uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2
        with:
          cache: false

      - name: Create or find draft prerelease
        id: release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: cargo x create-release --dev

  build:
    name: Build (${{ matrix.name }})
    needs: create-release
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: Linux x86_64
            os: ubuntu-22.04
            target: x86_64-unknown-linux-gnu
          - name: macOS aarch64
            os: macos-latest
            target: aarch64-apple-darwin
          - name: macOS x86_64
            os: macos-latest
            target: x86_64-apple-darwin
          - name: Windows x86_64
            os: windows-latest
            target: x86_64-pc-windows-msvc

    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
        with:
          ref: ${{ github.sha }}

      - name: Install Linux dependencies
        if: runner.os == 'Linux'
        run: |
          sudo apt-get update
          sudo apt-get install --yes \
            libappindicator3-dev \
            librsvg2-dev \
            libwebkit2gtk-4.1-dev \
            patchelf \
            xdg-utils

      - name: Install Rust toolchain
        uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2
        with:
          target: ${{ matrix.target }}
          cache-key: release-${{ matrix.target }}

      - name: Install Node.js
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
        with:
          node-version: 24
          cache: npm
          cache-dependency-path: crates/wizard/ff-wizard-ui/package-lock.json

      - name: Install frontend dependencies
        working-directory: crates/wizard/ff-wizard-ui
        run: npm ci

      - name: Build frontend
        working-directory: crates/wizard/ff-wizard-ui
        run: npm run build

      - name: Build and stage prerelease bundles
        shell: bash
        env:
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.DEV_TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.DEV_TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        run: >-
          cargo x release-build --dev
          --version ${{ needs.create-release.outputs.version }}
          --target ${{ matrix.target }}
          --output release-assets

      - name: Upload prerelease bundles
        shell: bash
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASE_TAG: ${{ needs.create-release.outputs.tag }}
        run: >-
          gh release upload "$RELEASE_TAG" release-assets/*
          --clobber
          --repo "$GITHUB_REPOSITORY"

  generate-latest-json:
    name: Generate updater metadata
    needs:
      - create-release
      - build
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
        with:
          ref: ${{ github.sha }}

      - name: Install Rust toolchain
        uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2
        with:
          cache: false

      - name: Generate and upload latest.json
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASE_ID: ${{ needs.create-release.outputs.release_id }}
        run: >-
          cargo x latest-json --dev
          --repository "$GITHUB_REPOSITORY"
          --release-id "$RELEASE_ID"

  publish-release:
    name: Publish
    needs:
      - create-release
      - generate-latest-json
    runs-on: ubuntu-latest

    steps:
      - name: Publish prerelease
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASE_ID: ${{ needs.create-release.outputs.release_id }}
        run: |
          gh api --method PATCH \
            "repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}" \
            -F draft=false \
            -F prerelease=true

  publish-update-channel:
    name: Publish dev updater channel
    needs:
      - create-release
      - publish-release
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pages: write
      id-token: write
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}

    steps:
      - name: Download updater metadata
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASE_TAG: ${{ needs.create-release.outputs.tag }}
        run: |
          mkdir site
          gh release download "$RELEASE_TAG" \
            --repo "$GITHUB_REPOSITORY" \
            --pattern latest.json \
            --dir site
          mv site/latest.json site/latest-dev.json
          jq --exit-status '.version and (.platforms | length > 0)' site/latest-dev.json >/dev/null

      - name: Upload Pages artifact
        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
        with:
          path: site

      - name: Deploy GitHub Pages
        id: deployment
        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5