publish-gem.yaml

name: Publish Ruby Gem

on:
  release:
    types: [published]

jobs:
  release:
    name: Publish Ruby Gem
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        with:
          ref: main
          fetch-depth: 0

      - uses: ruby/setup-ruby@v1
        with:
          # We are not letting this step to run bundle install, we will do it later
          bundler-cache: false

      - name: Install dependencies
        run: bundle install

      - name: Get token
        id: get_token
        uses: tibdex/github-app-token@v2
        with:
          private_key: ${{ secrets.RELEASE_APP_PEM }}
          app_id: ${{ secrets.RELEASE_APP_ID }}
          
      - name: Bump version
        run: |
          NEW_VERSION=$(echo ${{ github.event.release.tag_name }} | sed 's/^v//') # strip the 'v' from the tag if present
          sed -i "s/^  VERSION = '.*'/  VERSION = '${NEW_VERSION}'/g" lib/descope/version.rb
          echo -e "Updated version file:\n $(cat lib/descope/version.rb)"

      - name: Commit changes
        run: |
          git config --global user.name 'github-actions'
          git config --global user.email 'github-actions@github.com'
          git checkout main
          git add ./lib/descope/version.rb
          git commit -m "Bump version to $NEW_VERSION"
          git push origin main
        env:
          GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}

      - name: Repoint the tag to latest commit
        run: |
          git tag -d ${{ github.event.release.tag_name }}
          git tag ${{ github.event.release.tag_name }} -m "Release $NEW_VERSION"
          git push origin :${{ github.event.release.tag_name }}
          git push
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Publish to RubyGems
        run: |
          mkdir -p $HOME/.gem
          touch $HOME/.gem/credentials
          chmod 0600 $HOME/.gem/credentials
          printf -- "---\n:rubygems_api_key: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
          gem build *.gemspec
          gem push *.gem
        env:
          GEM_HOST_API_KEY: "${{secrets.RUBYGEMS_API_KEY}}"