github_release.yml

name: Create Github Release
on:
  push:
    branches:
      - devel
      - RELEASE*


concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  create-release:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      tag_version: ${{ steps.create_release.outputs.tag_version }}
    steps:
      - name: Checkout
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          fetch-depth: 0
      - name: Get most recent tag
        id: get_tag
        run: echo "TAG_VERSION=$(git describe --tags $(git rev-list --tags --max-count=1))" >> "$GITHUB_ENV"
      - name: Create Release
        id: create_release
        env:
          GITHUB_TOKEN: ${{ github.token }}
        run: |
          echo "Creating release for tag $TAG_VERSION"
          gh release create $TAG_VERSION --title "Release $TAG_VERSION" --notes "Release $TAG_VERSION" --target ${{ github.ref }}
          echo "tag_version=$TAG_VERSION" >> "$GITHUB_OUTPUT"
  create_release_artifacts:
    needs: [create-release]
    permissions:
      contents: write
      id-token: write
      attestations: write
    strategy:
      fail-fast: false
      matrix:
        r_version: ['release', 'devel']
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
      - name: Install system dependencies
        run: |
          sudo apt-get update && \
          sudo apt-get install -y \
          libcurl4-openssl-dev libssl-dev \
          libxml2-dev libgdal-dev libgit2-dev \
          libudunits2-dev libharfbuzz-dev libfribidi-dev \
          pandoc
      - name: Setup R
        uses: r-lib/actions/setup-r@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2.11.4
        with:
          r-version: ${{ matrix.r_version }}
          use-public-rspm: true
        id: r
      - name: Install dependencies
        uses: r-lib/actions/setup-renv@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2.11.4
      - name: Build Package
        run: R CMD build .
      - name: Rename Package
        run: echo "NEWNAME=$(./utilities/rename-package.R *.tar.gz)" >> "$GITHUB_ENV"
      - name: Attest builds
        id: attest_build
        uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
        with:
          subject-path: ${{ env.NEWNAME }}
      - name: debug
        run: |
          echo "R version: ${{ steps.r.outputs.installed-r-version }}"
          echo "Current Tag: ${{ needs.create-release.outputs.tag_version }}"
          echo "Release File Name: ${{ env.NEWNAME }}"
          echo "Bundle Path: ${{ steps.attest_build.outputs.bundle-path}}"
      - name: Move the attestation file
        run: mv ${{ steps.attest_build.outputs.bundle-path}} ${{ env.NEWNAME }}.jsonl
      - name: Upload Release Artifact
        env:
          RELEASE_TAG: ${{ needs.create-release.outputs.tag_version }}
          GH_TOKEN: ${{ github.token }}
        run: gh release upload ${{ env.RELEASE_TAG }} ${{ env.NEWNAME }} ${{ env.NEWNAME }}.jsonl