release.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Release
on:
  release:
    types:
      - published
permissions:
  attestations: write
  contents: read
  id-token: write
defaults:
  run:
    shell: bash
env:
  DOTNET_CLI_TELEMETRY_OPTOUT: true
  DOTNET_GENERATE_ASPNET_CERTIFICATE: false
  DOTNET_NOLOGO: true
  NUGET_TOKEN: ${{ secrets.NUGET_TOKEN }}
  OVSX_TOKEN: ${{ secrets.OVSX_TOKEN }}
  VSCE_TOKEN: ${{ secrets.VSCE_TOKEN }}
jobs:
  release:
    if: github.repository == 'vezel-dev/celerity'
    runs-on: ubuntu-24.04
    steps:
      - name: Clone repository
        uses: actions/checkout@v4.2.2
        with:
          fetch-depth: 0
          submodules: recursive
      - name: Set up .NET
        uses: actions/setup-dotnet@v4.2.0
      - name: Set up Node.js
        uses: actions/setup-node@v4.1.0
        with:
          node-version-file: src/extensions/vscode/package.json
      - name: Run Cake
        run: |
          ./cake upload-core-nuget -c Release
          ./cake upload-vscode -c Release
      - name: Attest packages
        uses: actions/attest-build-provenance@v2.1.0
        with:
          subject-path: out/pkg/dotnet/release/*.nupkg
      - name: Attest extensions
        uses: actions/attest-build-provenance@v2.1.0
        with:
          subject-path: out/pkg/vs*/*.vsix
      - name: Upload artifacts
        if: always()
        uses: actions/upload-artifact@v4.6.0
        with:
          name: ${{ github.workflow }}-${{ github.run_number }}-${{ github.run_attempt }}
          path: |
            out/log
            out/pkg
            out/pub
            out/trx