build.yaml

name: Deploy

on:
  push:
    branches: [main]
  schedule:
    - cron: "0 00,12 * * *"  # Twice a day

jobs:
  generate-matrix:
    name: Generate build matrix
    runs-on: ubuntu-latest
    needs: [test]
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          fetch-depth: 2
      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
        with:
          enable-cache: true
      - name: Generate build matrix
        id: set-matrix
        run: |
          FORCE=$(if git log --pretty=format:"%s" HEAD^..HEAD | grep -q '\[force\]'; then echo "--force"; else echo ""; fi)
          uv run dpn $FORCE build-matrix --event ${{ github.event_name }}


  deploy:
    name: ${{ matrix.key }}
    runs-on: ubuntu-latest
    if: needs.generate-matrix.outputs.matrix != ''
    needs: [generate-matrix]
    strategy:
      matrix: ${{ fromJSON(needs.generate-matrix.outputs.matrix) }}
    steps:
      # Setup
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
        with:
          enable-cache: true
      - name: Generate Dockerfile from config
        run: uv run dpn dockerfile --context '${{ toJSON(matrix) }}'
      - name: Set up QEMU
        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
      - name: Login to Docker Hub
        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      # Build
      - name: Build image
        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
        with:
          context: .
          file: dockerfiles/${{ matrix.key }}.Dockerfile
          load: true
          tags: nikolaik/python-nodejs:${{ matrix.key }}

      # Test
      - name: Run smoke tests
        run: |
          docker run --rm nikolaik/python-nodejs:${{ matrix.key }} sh -c "node --version && npm --version && yarn --version && python --version && pip --version && pipenv --version && poetry --version && uv --version"

      # Push image
      - name: Push image
        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
        id: build-and-push
        with:
          context: .
          file: dockerfiles/${{ matrix.key }}.Dockerfile
          platforms: ${{ join(matrix.platforms) }}
          push: true
          tags: nikolaik/python-nodejs:${{ matrix.key }}

      # Store build context
      - name: Add digest to build context
        run: |
          mkdir builds/
          digest="${{ steps.build-and-push.outputs.digest }}"
          echo '${{ toJSON(matrix) }}' | jq --arg digest "$digest" '. +={"digest": $digest}' >> "builds/${{ matrix.key }}.json"

      - name: Upload build context
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: build-${{ matrix.key }}
          path: builds/*
          if-no-files-found: error
          retention-days: 1

  release:
    name: Update versions.json and README.md
    runs-on: ubuntu-latest
    needs: [deploy]
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
        with:
          enable-cache: true

      - name: Download metadata for builds
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
        with:
          path: builds
          pattern: build-*
          merge-multiple: true

      - name: Update versions.json and README.md, then commit and push changes (if any)
        run: |
          uv run dpn --verbose release --builds-dir builds/
          clean_checkout=$(git status --porcelain)
          if [[ -n "${clean_checkout}" ]]; then
              git config --global user.name "Nikolai Kristiansen" > /dev/null 2>&1
              git config --global user.email nikolaik@users.noreply.github.com > /dev/null 2>&1

              # Update README.md
              today=$(date +%Y-%m-%d)
              sed -i -E "s/Last updated by bot: .*/Last updated by bot: ${today}/" README.md

              git add versions.json README.md
              git commit -m '🗃 Updated python/node versions [skip ci]'
              git push --quiet origin main
          else
              echo "Nothing changed, nothing to archive."
          fi

  test:
    uses: ./.github/workflows/tests.yaml