gemini-cli/.github/workflows/release.yml

name: Release

on:
  # Official Release: Triggered when a tag like v1.2.3 is pushed
  # push:
  #   tags:
  #     - 'v[0-9]+.[0-9]+.[0-9]+'

  # Pre-Release: Manual trigger from the GitHub Actions UI
  workflow_dispatch:
    inputs:
      pre_release_tag:
        description: 'NPM pre-release identifier (e.g., "beta", "next").'
        required: true
        default: 'next'
        type: string
      dry_run:
        description: 'Whether to run the publish step in dry-run mode.'
        required: true
        type: boolean
        default: true

jobs:
  release:
    runs-on: ubuntu-latest
    # Use the current repository name dynamically
    if: github.repository == 'google-gemini/gemini-cli'
    permissions:
      contents: write # Required to create a GitHub release
      packages: write # Required to publish to GitHub Packages (if you use it)
      id-token: write # Required for Workload Identity Federation to Google Cloud

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        # Fetch all history for versioning
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'

      - name: Install Dependencies
        run: npm ci

      - name: Check Version Consistency
        run: npm run check:versions

      - name: Setup Google Cloud SDK
        uses: 'google-github-actions/setup-gcloud@v2'

      - name: Authenticate to Google Cloud
        uses: 'google-github-actions/auth@v2'
        with:
          workload_identity_provider: 'projects/1024890423283/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider'
          service_account: 'gemini-cli-release@gemini-code-dev.iam.gserviceaccount.com'

      - name: Configure Docker
        run: gcloud auth configure-docker us-west1-docker.pkg.dev

      - name: Login to Artifact Registry
        run: docker login -u oauth2accesstoken -p "$(gcloud auth print-access-token)" https://us-west1-docker.pkg.dev

      - name: Set Release Version and Tag
        id: version
        run: |
          if [[ "${{ github.ref_type }}" == "tag" ]]; then
            # For official releases, use the git tag as the version
            # Example: v1.2.3 -> 1.2.3
            RELEASE_VERSION="${GITHUB_REF_NAME#v}"
            NPM_TAG="latest"
          else
            # For pre-releases, create a version like 1.2.3-next.1
            # and set the tag to "next"
            npm version --no-git-tag-version prerelease --preid=${{ inputs.pre_release_tag }}
            RELEASE_VERSION=$(node -p "require('./package.json').version")
            NPM_TAG="${{ inputs.pre_release_tag }}"
          fi
          echo "RELEASE_VERSION=${RELEASE_VERSION}" >> $GITHUB_OUTPUT
          echo "NPM_TAG=${NPM_TAG}" >> $GITHUB_OUTPUT

      - name: Determine Run Type
        id: run_type
        run: |
          if [[ "${{ github.ref_type }}" == "tag" || "${{ inputs.dry_run }}" == "false" ]]; then
            echo "NPM_DRY_RUN=" >> $GITHUB_OUTPUT
            echo "DOCKER_DRY_RUN=" >> $GITHUB_OUTPUT
          else
            echo "NPM_DRY_RUN=--dry-run" >> $GITHUB_OUTPUT
            echo "DOCKER_DRY_RUN=true" >> $GITHUB_OUTPUT
          fi

      - name: Configure npm for publishing
        run: |
          echo "registry=https://wombat-dressing-room.appspot.com/" > .npmrc
          echo "//wombat-dressing-room.appspot.com/:_authToken=${{ secrets.WOMBAT_TOKEN }}" >> .npmrc

      - name: Build, Prepare, and Publish
        run: npm run publish:release
        env:
          NPM_PUBLISH_TAG: ${{ steps.version.outputs.NPM_TAG }}
          NPM_DRY_RUN: ${{ steps.run_type.outputs.NPM_DRY_RUN }}
          DOCKER_DRY_RUN: ${{ steps.run_type.outputs.DOCKER_DRY_RUN }}

      - name: Create GitHub Release
        if: steps.run_type.outputs.NPM_DRY_RUN == ''
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create v${{ steps.version.outputs.RELEASE_VERSION }} \
            --title "Release v${{ steps.version.outputs.RELEASE_VERSION }}" \
            --notes "See the [CHANGELOG.md](CHANGELOG.md) for details."