release.yaml

name: Release

on:
  push:
    tags:
      - "v*"

permissions:
  contents: write
  packages: write
  id-token: write

jobs:
  vm:
    environment: release
    strategy:
      matrix:
        include:
          - arch: x86_64
            runs-on: ubuntu-latest
          - arch: aarch64
            runs-on: ubuntu-24.04-arm
    runs-on: ${{ matrix.runs-on }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          install_vm_deps: "build"
          save_cache: "true"
      - id: version
        run: |
          echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
          echo "latestTag=$([[ ${GITHUB_REF#refs/tags/v} =~ [a-zA-Z] ]] && echo prerelease || echo latest)" >> $GITHUB_OUTPUT
      - run: mise run microshift-vm:build --arch ${{ matrix.arch }}
      - uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v2
        with:
          prerelease: ${{ steps.version.outputs.latestTag == 'prerelease' }}
          files: |
            apps/microshift-vm/dist/${{ matrix.arch }}/microshift-vm-${{ matrix.arch }}.qcow2
            apps/microshift-vm/dist/${{ matrix.arch }}/microshift-vm-${{ matrix.arch }}.wsl
            apps/microshift-vm/dist/${{ matrix.arch }}/microshift-vm-${{ matrix.arch }}.incus.tar.gz

  adk:
    needs: [vm]
    runs-on: ubuntu-latest
    environment: release
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      HELM_EXPERIMENTAL_OCI: "1"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - id: version
        run: |
          echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
          echo "latestTag=$([[ ${GITHUB_REF#refs/tags/v} =~ [a-zA-Z] ]] && echo prerelease || echo latest)" >> $GITHUB_OUTPUT
          VERSION="${GITHUB_REF#refs/tags/v}"
          if [[ "$VERSION" =~ [Rr][Cc] ]]; then
            echo "npmTag=rc" >> $GITHUB_OUTPUT
          else
            echo "npmTag=latest" >> $GITHUB_OUTPUT
          fi
      - uses: ./.github/actions/setup
        with:
          install_vm_deps: "run"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mise run common:check:version
      - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
      - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - run: mise run 'adk-server:build:*'
      - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: ./apps/adk-server
          push: true
          platforms: linux/amd64,linux/arm64
          tags: |
            ghcr.io/${{ github.repository }}/adk-server:${{ github.sha }}
            ghcr.io/${{ github.repository }}/adk-server:${{ steps.version.outputs.version }}
            ghcr.io/${{ github.repository }}/adk-server:${{ steps.version.outputs.latestTag }}
          cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/adk-server:cache
          cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/adk-server:cache,mode=max

      - run: mise run 'adk-ui:build:*'
      - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          file: ./apps/adk-ui/Dockerfile
          push: true
          platforms: linux/amd64,linux/arm64
          tags: |
            ghcr.io/${{ github.repository }}/adk-ui:${{ github.sha }}
            ghcr.io/${{ github.repository }}/adk-ui:${{ steps.version.outputs.version }}
            ghcr.io/${{ github.repository }}/adk-ui:${{ steps.version.outputs.latestTag }}
          cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/adk-ui:cache
          cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/adk-ui:cache,mode=max

      - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: ./
          file: agents/adk-support-agent/Dockerfile
          push: true
          platforms: linux/amd64,linux/arm64
          tags: |
            ghcr.io/${{ github.repository }}/agents/adk-support-agent:${{ github.sha }}
            ghcr.io/${{ github.repository }}/agents/adk-support-agent:${{ steps.version.outputs.version }}
            ghcr.io/${{ github.repository }}/agents/adk-support-agent:${{ steps.version.outputs.latestTag }}
          cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/agents/adk-support-agent:cache
          cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/agents/adk-support-agent:cache,mode=max

      - run: mise run helm:build
      - run: echo '${{ secrets.GITHUB_TOKEN }}' | helm registry login --username '${{ github.actor }}' --password-stdin ghcr.io
      - run: helm push ./helm/dist/kagenti-adk-*.tgz 'oci://ghcr.io/${{ github.repository }}/chart'

      - run: mise run adk-py:build
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          packages-dir: apps/adk-py/dist

      - run: mise run adk-cli:build
      - uses: pypa/gh-action-pypi-publish@release/v1
        with:
          packages-dir: apps/adk-cli/dist

      - working-directory: apps/adk-ts
        run: npm publish --tag ${{ steps.version.outputs.npmTag }}

      - run: |
          git reset --hard HEAD
          git fetch origin
          git checkout -B install origin/main
          git push --force --set-upstream origin install