name: Build/release

on:
    push:
        tags:
            - v*

jobs:
    release:
        runs-on: ${{ matrix.os }}

        strategy:
            matrix:
                os: [macos-latest, ubuntu-latest, windows-latest]

        steps:
            - name: Check out Git repository
              uses: actions/checkout@v3
              with:
                  submodules: recursive

            - name: Install Node.js, NPM and Yarn
              uses: actions/setup-node@v3
              with:
                  node-version: 20

            - name: Prepare for app notarization
              if: startsWith(matrix.os, 'macos')
              # Import Apple API key for app notarization on macOS
              run: |
                  mkdir -p ~/private_keys/
                  echo '${{ secrets.api_key }}' > ~/private_keys/AuthKey_${{ secrets.api_key_id }}.p8

            - name: Install libarchive-tools for pacman build # Related https://github.com/electron-userland/electron-builder/issues/4181
              if: startsWith(matrix.os, 'ubuntu')
              run: sudo apt-get install libarchive-tools

            - name: Ente Electron Builder Action
              uses: ente-io/action-electron-builder@v1.0.0
              with:
                  # GitHub token, automatically provided to the action
                  # (No need to define this secret in the repo settings)
                  github_token: ${{ secrets.github_token }}

                  # If the commit is tagged with a version (e.g. "v1.0.0"),
                  # release the app after building
                  release: ${{ startsWith(github.ref, 'refs/tags/v') }}

                  mac_certs: ${{ secrets.mac_certs }}
                  mac_certs_password: ${{ secrets.mac_certs_password }}
              env:
                  # macOS notarization API key
                  API_KEY_ID: ${{ secrets.api_key_id }}
                  API_KEY_ISSUER_ID: ${{ secrets.api_key_issuer_id}}
                  # setry crash reporting token
                  SENTRY_AUTH_TOKEN: ${{secrets.sentry_auth_token}}
                  NEXT_PUBLIC_DISABLE_SENTRY: ${{secrets.next_public_disable_sentry}}
                  USE_HARD_LINKS: false