ci.yml

name: CI

on:
  push:
    branches:
      - develop
  pull_request:
    branches:
      - develop
      - master
  workflow_dispatch:

permissions:
  contents: read

# One validation run per branch; newer pushes cancel in-flight runs.
concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  validate:
    name: Lint, test and build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7

      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: "22"
          cache: "npm"

      - name: Install dependencies
        run: npm ci

      - name: Lint 🧹
        run: npm run lint

      - name: Test 🧪
        run: npm test

      - name: Build 🔧
        run: npm run build

  promote:
    name: Promote develop to master
    needs: validate
    # Only a validated push on develop is promoted, never a pull request.
    if: github.event_name == 'push' && github.ref == 'refs/heads/develop'
    runs-on: ubuntu-latest
    permissions:
      contents: write
      actions: write
    concurrency:
      group: promote-master
      cancel-in-progress: false
    steps:
      - name: Checkout full history
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Fast-forward master to develop
        run: |
          git push origin ${{ github.sha }}:refs/heads/master

      # A push made with GITHUB_TOKEN does not trigger other workflows, so the
      # Pages deployment has to be dispatched explicitly on the new master.
      - name: Trigger the Pages deployment
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh workflow run deploy.yml --ref master