build-test-publish-on-push.yml

name: Build, Test and Publish
on:
  workflow_dispatch:
  push:
    branches:
      - 'main'
      - 'develop'
      - 'feature/**'
      - 'feat/**'
      - 'fix/**'

jobs:
  build-test-publish:
    env:
      NPM_TOKEN: ${{secrets.NPM_TOKEN}}
      NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
      GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
      GH_USER: ${{secrets.GH_USER}}
      GH_EMAIL: ${{secrets.GH_EMAIL}}
      VC_HTTP_API_AUTH_TOKEN: ${{secrets.VC_HTTP_API_AUTH_TOKEN}}
      AZURE_KEYVAULT_URL: ${{secrets.AZURE_KEYVAULT_URL}}
      AZURE_KEYVAULT_TENANT_ID: ${{secrets.AZURE_KEYVAULT_TENANT_ID}}
      AZURE_KEYVAULT_CLIENT_ID: ${{secrets.AZURE_KEYVAULT_CLIENT_ID}}
      AZURE_KEYVAULT_CLIENT_SECRET: ${{secrets.AZURE_KEYVAULT_CLIENT_SECRET}}

    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:10.10
        env:
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: test123
        ports:
          - 5432:5432
        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: pnpm/action-setup@v4
        with:
          version: 9
      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20.x'
          cache: 'pnpm'
      - run: pnpm install
      - run: pnpm build
      - name: run CI tests
        env:
          INCLUDE_POSTGRES_TESTS: true
          POSTGRES_HOST: localhost
          POSTGRES_USER: postgres
          POSTGRES_PASSWORD: test123
          POSTGRES_PORT: 5432
        run: pnpm test:ci
      - run: git diff -u pnpm-lock.yaml

      - name: setup git coordinates
        run: |
          git remote set-url origin https://Sphereon-Opensource:$GH_TOKEN@github.com/Sphereon-Opensource/SSI-SDK-crypto-extensions.git
          git config user.name $GH_USER
          git config user.email $GH_EMAIL

      - name: setup npm registry
        run: |
          echo "@sphereon:registry=https://registry.npmjs.org/" > .npmrc
          echo "registry=https://registry.npmjs.org/" >> .npmrc
          echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> .npmrc
#          npm whoami

      - run: git diff -u

      - name: Sets PREID
        env:
          name: "${{github.ref_name}}"
        run: |
          echo "PRE_ID=${name//[\/_-]/.}" >> $GITHUB_ENV

      - name: publish @latest when on main
        if: github.ref == 'refs/heads/main'
        run: lerna publish --conventional-commits --force-publish --include-merged-tags --sync-dist-version --create-release github --yes --dist-tag latest --registry https://registry.npmjs.org

      - name: publish @next when on develop
        if: github.ref == 'refs/heads/develop'
        run: lerna publish --conventional-prerelease --force-publish --canary --sync-dist-version --no-git-tag-version --include-merged-tags --preid next --pre-dist-tag next --yes --registry https://registry.npmjs.org

      - name: publish @next when on fix branch
        if: startsWith(github.ref, 'refs/heads/fix')
        run: lerna publish --conventional-prerelease --force-publish --canary --sync-dist-version --no-git-tag-version --include-merged-tags --preid fix --pre-dist-tag fix --yes --registry https://registry.npmjs.org

      - name: publish @unstable when on unstable branch
        if: startsWith(github.ref, 'refs/heads/feat')
        run: lerna publish --conventional-prerelease --force-publish --canary --sync-dist-version --no-git-tag-version --include-merged-tags --preid $PRE_ID --pre-dist-tag unstable --yes --throttle-size 75 --registry https://registry.npmjs.org