release-published.yml

name: Release Published

on:
  release:
    types: [published]

permissions:
  contents: write
  pull-requests: write
  issues: write
  actions: write

jobs:
  create_release:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Validate release version
        id: validate-release
        uses: ./.github/actions/validate-published-release
        with:
          release-tag: ${{ github.event.release.tag_name }}

      - name: Setup Node
        uses: ./.github/actions/setup-node

      - name: Build package
        id: build-package
        uses: ./.github/actions/build-and-package

      - name: upload package artifact
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release upload "${{ github.event.release.tag_name }}" \
            "${{ steps.build-package.outputs.package-path }}#temporal-ui-package.tar.gz"

      - name: Prepare dispatch token
        id: dispatch_token
        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
        with:
          client-id: ${{ secrets.TEMPORAL_CICD_APP_ID }}
          private-key: ${{ secrets.TEMPORAL_CICD_PRIVATE_KEY }}
          permission-contents: write
          repositories: ${{ vars.DOWNSTREAM_REPO }}

      - name: Trigger ui-server workflow
        uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
        with:
          token: ${{ steps.dispatch_token.outputs.token }}
          repository: ${{ vars.DOWNSTREAM_ORG }}/${{ vars.DOWNSTREAM_REPO }}
          event-type: sync-from-ui-release
          client-payload: |
            {
              "ref": "refs/tags/${{ github.event.release.tag_name }}",
              "release_tag": "${{ github.event.release.tag_name }}",
              "release_url": "${{ github.event.release.html_url }}"
            }