push-tag.yml

---
# yamllint disable rule:line-length
name: Push tag to extension
on:  # yamllint disable-line rule:truthy
  workflow_call:
    inputs:
      repository:
        required: true
        type: string
      version:
        required: true
        type: string
      env_changes:
        required: true
        type: string

jobs:
  run:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      id-token: write

    steps:
      - name: Echo inputs
        run: |
          echo "repository: ${{ inputs.repository }}"
          echo "version: ${{ inputs.version }}"
          echo "env_changes: ${{ inputs.env_changes }}"

      - name: Generate a token
        id: app-token
        uses: actions/create-github-app-token@v1
        with:
          app-id: ${{ secrets.RELEASER_APP_ID }}
          private-key: ${{ secrets.RELEASER_APP_PRIVATE_KEY }}
          repositories: ${{ inputs.repository }}

      - name: Checkout
        uses: actions/checkout@v4
        with:
          repository: codecov/${{ inputs.repository }}
          token: ${{ steps.app-token.outputs.token }}

      - name: Import GPG key
        id: import-gpg
        uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.RELEASER_GPG_PRIVATE_KEY }}
          git_user_signingkey: true
          git_commit_gpgsign: true
          git_config_global: true

      - name: Create release branch
        run: git checkout -b release/wrapper/${{ inputs.version }}

      - name: Pull latest wrapper
        run: git submodule update --init --recursive --remote

      - name: Make commit
        run: |
          git add src/scripts
          git commit -S --message "chore(release): wrapper-${{ inputs.version }}"
          git push origin release/wrapper/${{ inputs.version }} -f

      - name: Install GitHub CLI
        uses: dev-hanz-ops/install-gh-cli-action@v0.1.0

      - name: Create pull request into main
        run: |
          gh pr create --title "chore(release): wrapper -${{ inputs.version }}" --body "${{ inputs.env_changes }}" --base "main"
        env:
          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}