homeio

1name: CI
2
3on:
4  push:
5    branches:
6      - main
7      - develop
8  pull_request:
9    branches:
10      - main
11      - develop
12  workflow_dispatch:
13
14permissions:
15  contents: read
16  packages: write
17
18concurrency:
19  group: ci-${{ github.ref }}
20  cancel-in-progress: true
21
22jobs:
23  verify:
24    name: Lint, Test, Build
25    runs-on: ubuntu-latest
26
27    services:
28      postgres:
29        image: postgres:16
30        env:
31          POSTGRES_USER: postgres
32          POSTGRES_PASSWORD: postgres
33          POSTGRES_DB: home_server
34        ports:
35          - 5432:5432
36        options: >-
37          --health-cmd pg_isready
38          --health-interval 10s
39          --health-timeout 5s
40          --health-retries 5
41
42    env:
43      DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/home_server
44
45    steps:
46      - name: Checkout
47        uses: actions/checkout@v4
48
49      - name: Setup Node.js 22
50        uses: actions/setup-node@v4
51        with:
52          node-version: "22"
53          cache: "npm"
54
55      - name: Install dependencies
56        run: npm ci --ignore-scripts
57
58      - name: Lint
59        run: npm run lint
60
61      - name: Unit tests
62        run: npm run test:coverage
63
64      - name: Build
65        run: NODE_ENV=production npm run build
66
67  release:
68    name: Create GitHub Release
69    runs-on: ubuntu-latest
70    needs: verify
71    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
72    permissions:
73      contents: write
74    outputs:
75      version: ${{ steps.read.outputs.version }}
76
77    steps:
78      - name: Checkout
79        uses: actions/checkout@v4
80        with:
81          fetch-depth: 0
82          token: ${{ secrets.GITHUB_TOKEN }}
83
84      - name: Configure Git identity
85        run: |
86          git config user.name "github-actions[bot]"
87          git config user.email "github-actions[bot]@users.noreply.github.com"
88
89      - name: Read version from package.json
90        id: read
91        run: echo "version=$(jq -r '.version' package.json)" >> $GITHUB_OUTPUT
92
93      - name: Check if tag already exists
94        id: tag_check
95        run: |
96          git fetch --tags
97          if git rev-parse "v${{ steps.read.outputs.version }}" >/dev/null 2>&1; then
98            echo "exists=true"  >> $GITHUB_OUTPUT
99          else
100            echo "exists=false" >> $GITHUB_OUTPUT
101          fi
102
103      - name: Create and push tag
104        if: steps.tag_check.outputs.exists == 'false'
105        run: |
106          git tag -a "v${{ steps.read.outputs.version }}" \
107            -m "Release v${{ steps.read.outputs.version }}"
108          git push origin "v${{ steps.read.outputs.version }}"
109
110      - name: Get merged PR info
111        id: pr
112        if: steps.tag_check.outputs.exists == 'false'
113        env:
114          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
115        run: |
116          PR=$(gh api "/repos/${{ github.repository }}/commits/${{ github.sha }}/pulls" \
117            -H "Accept: application/vnd.github+json" | jq -c '.[0] // null')
118          if [[ "$PR" != "null" && "$PR" != "" ]]; then
119            echo "title=$(echo "$PR" | jq -r '.title')" >> $GITHUB_OUTPUT
120            { echo "body<<EOF"; echo "$PR" | jq -r '.body // ""'; echo "EOF"; } >> $GITHUB_OUTPUT
121          else
122            echo "title=$(git log -1 --pretty=format:'%s' ${{ github.sha }})" >> $GITHUB_OUTPUT
123            echo "body=" >> $GITHUB_OUTPUT
124          fi
125
126      - name: Create GitHub Release
127        if: steps.tag_check.outputs.exists == 'false'
128        env:
129          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
130          RELEASE_NOTES: ${{ steps.pr.outputs.body }}
131        run: |
132          printf '%s' "$RELEASE_NOTES" > /tmp/release-notes.md
133          gh release create "v${{ steps.read.outputs.version }}" \
134            --title "Homeio v${{ steps.read.outputs.version }}" \
135            --notes-file /tmp/release-notes.md \
136            --latest
137
138  docker:
139    name: Build & Push Docker Image
140    runs-on: ubuntu-latest
141    needs: [verify, release]
142    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
143    # The arm64 half builds under QEMU, where `npm ci` sometimes hangs. A good
144    # run takes about 20 minutes; without a limit a hang holds the runner for
145    # the 6-hour maximum (1.9.3 and 1.9.7 got no image that way). Re-run the
146    # job if it times out.
147    timeout-minutes: 45
148
149    steps:
150      - name: Checkout
151        uses: actions/checkout@v4
152
153      - name: Log in to GitHub Container Registry
154        uses: docker/login-action@v3
155        with:
156          registry: ghcr.io
157          username: ${{ github.actor }}
158          password: ${{ secrets.GITHUB_TOKEN }}
159
160      - name: Set up QEMU
161        uses: docker/setup-qemu-action@v3
162
163      - name: Set up Docker Buildx
164        uses: docker/setup-buildx-action@v3
165
166      - name: Build and push
167        uses: docker/build-push-action@v6
168        with:
169          context: .
170          push: true
171          platforms: linux/amd64,linux/arm64
172          tags: |
173            ghcr.io/doctor-io/homeio:latest
174            ghcr.io/doctor-io/homeio:${{ needs.release.outputs.version }}
175          cache-from: type=gha
176          cache-to: type=gha,mode=max
177