main.yml

name: Builds, tests & co

on:
  pull_request:
  push:
    branches:
      - master
    tags:
      - "*"

# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#concurrency
# Concurrent workflows are grouped by the PR or branch that triggered them
# (github.ref) and the name of the workflow (github.workflow). The
# 'cancel-in-progress' option then make sure that only one workflow is running
# at a time. This doesn't prevent new jobs from running, rather it cancels
# already running jobs before scheduling new jobs.
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name == 'pull_request' || github.sha }}
  cancel-in-progress: true

permissions: read-all

jobs:
  build:
    permissions:
      attestations: write
      contents: read
      id-token: write
    runs-on: ubuntu-latest
    steps:
      - name: Checkout tree
        uses: actions/checkout@v4

      - name: Set-up OCaml
        uses: ocaml/setup-ocaml@v3
        with:
          ocaml-compiler: 4
          dune-cache: true

      - name: Set-up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 22
          check-latest: true

      - name: Add the Corepack shims
        run: corepack enable

      - name: Install dependencies
        run: make deps

      - name: Run CI checks with Biome
        if: runner.os == 'Linux'
        run: yarn lint

      - name: Build extension
        run: opam exec -- make build-release

      - name: Package extension
        if: runner.os == 'Linux'
        run: yarn package

      - name: Generate artifact attestation
        uses: actions/attest-build-provenance@v1
        with:
          subject-path: ocaml-platform.vsix

      - name: Upload artifact
        if: runner.os == 'Linux'
        uses: actions/upload-artifact@v4
        with:
          name: ocaml-platform-${{ github.sha }}
          path: ocaml-platform.vsix

      - name: Test extension on Linux
        if: runner.os == 'Linux'
        run: xvfb-run -a yarn test

      - name: Test extension on macOS/Windows
        if: runner.os != 'Linux'
        run: yarn test

      - name: Publish extension to VSCode Marketplace
        if: runner.os == 'Linux' && startsWith(github.ref, 'refs/tags')
        continue-on-error: true
        run: yarn deploy:vsce
        env:
          VSCE_PAT: ${{ secrets.VSCODE_MARKETPLACE_TOKEN }}

      - name: Publish extension to Open VSX
        if: runner.os == 'Linux' && startsWith(github.ref, 'refs/tags')
        continue-on-error: true
        run: yarn deploy:ovsx --pat "$OVSX_PAT"
        env:
          OVSX_PAT: ${{ secrets.OPEN_VSX_TOKEN }}

      - name: Create release
        if: runner.os == 'Linux' && startsWith(github.ref, 'refs/tags')
        continue-on-error: true
        uses: softprops/action-gh-release@v2
        with:
          draft: true
          files: ocaml-platform.vsix

  lint-opam:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout tree
        uses: actions/checkout@v4
      - name: Set-up OCaml
        uses: ocaml/setup-ocaml@v3
        with:
          ocaml-compiler: 4
      - uses: ocaml/setup-ocaml/lint-opam@v3

  lint-fmt:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout tree
        uses: actions/checkout@v4
      - name: Set-up OCaml
        uses: ocaml/setup-ocaml@v3
        with:
          ocaml-compiler: 4
      - uses: ocaml/setup-ocaml/lint-fmt@v3