name: 🍰 Release

on:
    push:
        tags:
            - 'v*.*.*'
            - 'v*.*.*-alpha.*'
            - 'v*.*.*-beta.*'
            - 'v*.*.*-rc.*'

concurrency:
    group: ${{ github.workflow }}-${{ github.ref }}
    cancel-in-progress: true

permissions:
    contents: read

env:
    TURBO_TELEMETRY_DISABLED: '1'

jobs:
    release-npm:
        if: github.repository == 'dream-num/univer'
        runs-on: ubuntu-latest
        timeout-minutes: 30
        permissions:
            contents: read
            id-token: write

        steps:
            - name: Checkout
              uses: actions/checkout@v7
              with:
                  ref: ${{ github.ref_name }}
                  persist-credentials: false

            - name: Install pnpm and Node.js
              uses: pnpm/setup@v2
              with:
                  runtime: node@24.3.0
                  install: false

            - name: Configure npm registry
              uses: actions/setup-node@v6
              with:
                  registry-url: https://registry.npmjs.org
                  package-manager-cache: false

            - name: 🚚 Install dependencies and build
              run: |
                  pnpm install --frozen-lockfile
                  pnpm build

            - name: 🐙 Publish
              env:
                  REF_NAME: ${{ github.ref_name }}
              run: |
                  if [[ "$REF_NAME" =~ -(alpha|beta|rc)\. ]]; then
                      pnpm publish --access public --tag "${BASH_REMATCH[1]}" -r --no-git-checks --provenance
                  else
                      pnpm publish --access public -r --no-git-checks --provenance
                  fi