deploy.yml

name: Deploy

on: [ push, workflow_dispatch ]

jobs:

  affected:
    uses: lunarmodules/.github/.github/workflows/list_affected_rockspecs.yml@main

  build:
    needs: affected
    if: ${{ needs.affected.outputs.rockspecs }}
    uses: lunarmodules/.github/.github/workflows/test_build_rock.yml@main
    with:
      rockspecs: ${{ needs.affected.outputs.rockspecs }}

  upload:
    needs: [ affected, build ]
    # Only run upload if:
    # 1. We are on the canonical repository (no uploads from forks)
    # 2. The current commit is either tagged or on the default branch (the workflow will upload dev/scm rockspecs any
    #    time they are touched, tagged ones whenever the edited rockspec and tag match)
    # 3. Some rockspecs were changed — this implies the commit changing the rockspec is the same one that gets tagged
    if: >-
      ${{
        github.repository == 'lunarmodules/luacheck' &&
        ( github.ref_name == 'master' || startsWith(github.ref, 'refs/tags/') ) &&
        needs.affected.outputs.rockspecs
      }}
    uses: lunarmodules/.github/.github/workflows/upload_to_luarocks.yml@main
    with:
      rockspecs: ${{ needs.affected.outputs.rockspecs }}
    secrets:
      apikey: ${{ secrets.LUAROCKS_APIKEY }}

  docker:
    if: >-
      ${{
        github.repository == 'lunarmodules/luacheck' &&
        ( github.ref_name == 'master' || startsWith(github.ref, 'refs/tags/') )
      }}
    uses: lunarmodules/.github/.github/workflows/docker_ghcr_deploy.yml@main
    with:
      username: ${{ github.actor }}
      tag: ${{ github.ref_name }}
    secrets:
      token: ${{ secrets.GHCR_PAT }}