Trackeep/.github/workflows/release.yml

name: Release and Deploy

on:
  push:
    tags:
      - 'v*'  # Trigger on version tags like v1.2.5
  workflow_dispatch:  # Allow manual triggers

env:
  REGISTRY: ghcr.io/dvorinka/trackeep

jobs:
  extract-version:
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
      is-prerelease: ${{ steps.version.outputs.is-prerelease }}
    steps:
      - name: Extract version from tag
        id: version
        run: |
          # Extract version from git tag (remove 'v' prefix)
          VERSION=${GITHUB_REF#refs/tags/v*}
          VERSION=${VERSION#refs/tags/v}
          echo "version=$VERSION" >> $GITHUB_OUTPUT
          
          # Check if this is a prerelease (contains - or alpha/beta/rc)
          if [[ $VERSION == *-* ]] || [[ $VERSION == *alpha* ]] || [[ $VERSION == *beta* ]] || [[ $VERSION == *rc* ]]; then
            echo "is-prerelease=true" >> $GITHUB_OUTPUT
          else
            echo "is-prerelease=false" >> $GITHUB_OUTPUT
          fi
          
          echo "🏷️ Version: $VERSION"
          echo "🚀 Prerelease: ${{ steps.version.outputs.is-prerelease }}"

  build-and-push:
    needs: extract-version
    runs-on: ubuntu-latest
    strategy:
      matrix:
        service: [backend, frontend]
    steps:
      - uses: actions/checkout@v4
      
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
        
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
          
      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.REGISTRY }}/${{ matrix.service }}
          tags: |
            type=ref,event=tag
            type=semver,pattern={{version}}
            type=raw,value=latest,enable={{isdefault_branch}}
          labels: |
            version=${{ needs.extract-version.outputs.version }}
            build-date=${{ github.event.head_commit.timestamp }}
            commit=${{ github.sha }}
            service=${{ matrix.service }}
            prerelease=${{ needs.extract-version.outputs.is-prerelease }}
            
      - name: Build and push ${{ matrix.service }}
        uses: docker/build-push-action@v5
        with:
          context: |
            backend=./backend
            frontend=.
          file: |
            backend=./backend/Dockerfile
            frontend=./frontend/Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          
      - name: Generate SBOM
        uses: anchore/sbom-action@v0
        with:
          image: ${{ env.REGISTRY }}/${{ matrix.service }}:${{ needs.extract-version.outputs.version }}
          format: spdx-json
          output-file: ./sbom-${{ matrix.service }}.spdx.json
          
      - name: Upload SBOM
        uses: actions/upload-artifact@v4
        with:
          name: sbom-${{ matrix.service }}
          path: ./sbom-${{ matrix.service }}.spdx.json

  create-github-release:
    needs: [extract-version, build-and-push]
    runs-on: ubuntu-latest
    if: needs.extract-version.outputs.is-prerelease == 'false'  # Only create releases for stable versions
    steps:
      - uses: actions/checkout@v4
      
      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          tag: v${{ needs.extract-version.outputs.version }}
          name: Trackeep v${{ needs.extract-version.outputs.version }}
          body: |
            ## 🚀 Trackeep v${{ needs.extract-version.outputs.version }}
            
            ### 🐳 Docker Images
            - **Backend**: `ghcr.io/dvorinka/trackeep/backend:${{ needs.extract-version.outputs.version }}`
            - **Frontend**: `ghcr.io/dvorinka/trackeep/frontend:${{ needs.extract-version.outputs.version }}`
            - **Latest**: `ghcr.io/dvorinka/trackeep/backend:latest` and `ghcr.io/dvorinka/trackeep/frontend:latest`
            
            ### 📋 Changes
            ${{ github.event.head_commit.message }}
            
            ### 🔧 Installation
            ```bash
            # Set version
            export APP_VERSION=${{ needs.extract-version.outputs.version }}
            
            # Deploy with production compose
            docker compose -f docker-compose.prod.yml up -d
            ```
            
            ### ⚡ Auto-Updates
            The application includes a built-in update system that:
            - ✅ Automatically checks for updates every 24 hours
            - ✅ Shows update notifications in the left navigation
            - ✅ One-click installation from the UI
            - ✅ No authentication or setup required
            
          draft: false
          prerelease: ${{ needs.extract-version.outputs.is-prerelease }}
          files: |
            sbom-backend.spdx.json
            sbom-frontend.spdx.json
          generate_release_notes: true

  update-docker-compose-prod:
    needs: extract-version
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Update docker-compose.prod.yml with new version
        run: |
          # Update the version in docker-compose.prod.yml for next development
          sed -i "s/APP_VERSION=.*/APP_VERSION=${{ needs.extract-version.outputs.version }}/" docker-compose.prod.yml
          
          echo "📝 Updated docker-compose.prod.yml with version ${{ needs.extract-version.outputs.version }}"
          
      - name: Commit updated docker-compose.prod.yml
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add docker-compose.prod.yml
          git commit -m "chore: Update APP_VERSION to ${{ needs.extract-version.outputs.version }}"
          git push