grm/.gitea/workflows/post-merge.yml

name: Post-merge

# Runs on every push to master. A single workflow with conditional jobs
# replaces the previous 4 separate workflows (release.yml, post-merge.yml,
# sync-wiki.yml, and the badges job from ci.yml).
#
# Job dependency graph:
#
#   detect-type ──┬── release (skip if release commit)
#                 ├── sync-wiki (skip if release commit)
#                 ├── badges (skip if release commit)
#                 └── vikunja (skip if release commit)
#
# When release.py creates a "release: vX.Y.Z" commit, all jobs skip
# because it's a release commit. The tag push triggers publish.yml.

on:
  push:
    branches: [master]

jobs:
  detect-type:
    runs-on: docker
    timeout-minutes: 10
    outputs:
      is-release: ${{ steps.check.outputs.is-release }}
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - name: Check if this is a release commit
        id: check
        run: |
          set -euo pipefail
          MSG=$(git log -1 --pretty=%s)
          echo "Commit message: $MSG"
          if echo "$MSG" | grep -qE '^release: v[0-9]+\.[0-9]+\.[0-9]+'; then
            echo "is-release=true" >> "$GITHUB_OUTPUT"
            echo "Release commit — skipping all post-merge jobs."
          else
            echo "is-release=false" >> "$GITHUB_OUTPUT"
            echo "Regular merge commit — running all post-merge jobs."
          fi

  release:
    needs: [detect-type]
    if: needs.detect-type.outputs.is-release == 'false'
    runs-on: docker
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.REPO_TOKEN }}
      - name: Set up environment
        run: make setup
      - name: Install git-cliff
        run: |
          set -euo pipefail
          GIT_CLIFF_VERSION="2.13.0"
          URL="https://github.com/orhun/git-cliff/releases/download/v${GIT_CLIFF_VERSION}/git-cliff-${GIT_CLIFF_VERSION}-x86_64-unknown-linux-gnu.tar.gz"
          TMPDIR="$(mktemp -d)"
          curl -sL "$URL" | tar xz -C "$TMPDIR"
          mkdir -p "$HOME/.local/bin"
          mv "$TMPDIR/git-cliff-${GIT_CLIFF_VERSION}/git-cliff" "$HOME/.local/bin/git-cliff"
          chmod +x "$HOME/.local/bin/git-cliff"
          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
          "$HOME/.local/bin/git-cliff" --version
      - name: Configure git
        run: |
          set -euo pipefail
          git config user.name "grm-ci-bot"
          git config user.email "grm-ci-bot@oblachno.fyi"
      - name: Run release
        env:
          PYTHONPATH: .
        run: |
          set -euo pipefail
          . .venv/bin/activate
          python3 scripts/ci/release.py
      - name: Notify on failure
        if: failure()
        env:
          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          python3 scripts/ci/notify_failure.py \
            --repo "${{ github.repository }}" \
            --run-id "${{ github.run_id }}" \
            --workflow "post-merge/release" \
            --commit "${{ github.sha }}"

  sync-wiki:
    needs: [detect-type]
    if: needs.detect-type.outputs.is-release == 'false'
    runs-on: docker
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Set up environment
        run: make setup
      - name: Sync documentation to wiki
        env:
          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          . .venv/bin/activate
          python3 scripts/ci/sync_wiki.py --repo "${{ github.repository }}" --strict
      - name: Notify on failure
        if: failure()
        env:
          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          python3 scripts/ci/notify_failure.py \
            --repo "${{ github.repository }}" \
            --run-id "${{ github.run_id }}" \
            --workflow "post-merge/sync-wiki" \
            --commit "${{ github.sha }}"

  badges:
    needs: [detect-type]
    if: needs.detect-type.outputs.is-release == 'false'
    runs-on: docker
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.REPO_TOKEN }}
      - name: Set up environment
        run: make setup
      - name: Generate badge SVG files
        run: |
          set -euo pipefail
          . .venv/bin/activate
          python3 scripts/generate_badges.py --output-dir .badges/
          # Verify badges were generated
          if [ -z "$(ls -A .badges/ 2>/dev/null)" ]; then
            echo "::error::No badge SVG files generated"
            exit 1
          fi
      - name: Push badges to badges branch
        env:
          PRE_COMMIT_ALLOW_NO_CONFIG: "1"
        run: |
          set -euo pipefail
          git config user.name "gitea-actions-bot"
          git config user.email "actions@oblachno.fyi"
          git checkout --orphan badges
          git rm -rf .
          cp -r .badges/* .
          git add ./*.svg
          git commit --no-verify -m "Update badges [skip ci]"
          git push origin badges --force
      - name: Notify on failure
        if: failure()
        env:
          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          python3 scripts/ci/notify_failure.py \
            --repo "${{ github.repository }}" \
            --run-id "${{ github.run_id }}" \
            --workflow "post-merge/badges" \
            --commit "${{ github.sha }}"

  vikunja:
    needs: [detect-type]
    if: needs.detect-type.outputs.is-release == 'false'
    runs-on: docker
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Install dependencies
        run: python3 -m pip install --break-system-packages requests python-dotenv click
      - name: Update Vikunja task
        env:
          VIKUNJA_TOKEN: ${{ secrets.VIKUNJA_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          python3 scripts/ci/post_merge.py \
            "$(git log -1 --pretty=%B)" \
            --commit-sha "$(git rev-parse HEAD)"
      - name: Notify on failure
        if: failure()
        env:
          REPO_TOKEN: ${{ secrets.REPO_TOKEN }}
          PYTHONPATH: src
        run: |
          set -euo pipefail
          python3 scripts/ci/notify_failure.py \
            --repo "${{ github.repository }}" \
            --run-id "${{ github.run_id }}" \
            --workflow "post-merge/vikunja" \
            --commit "${{ github.sha }}"