release-manual.yml

name: Manual Release

on: 
  workflow_dispatch:

permissions:
  id-token: write  # Required for OIDC token generation

concurrency:
  cancel-in-progress: true
  group: release-${{ github.ref_name }}

jobs:
  yarn-release:
    runs-on: ubuntu-latest
    name: Create release
    steps:
      - name: Get GitHub App Token
        id: token
        uses: SocialGouv/token-bureau@main
        with:
          token-bureau-url: https://token-bureau.fabrique.social.gouv.fr
          audience: socialgouv

      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          token: ${{ steps.token.outputs.token }}

      - name: Install dependencies
        run: yarn --immutable

      - name: Run release
        env:
          GIT_AUTHOR_EMAIL: ${{ secrets.SOCIALGROOVYBOT_EMAIL }}
          GIT_AUTHOR_NAME: ${{ secrets.SOCIALGROOVYBOT_NAME }}
          GIT_COMMITTER_EMAIL: ${{ secrets.SOCIALGROOVYBOT_EMAIL }}
          GIT_COMMITTER_NAME: ${{ secrets.SOCIALGROOVYBOT_NAME }}
        run: yarn release
      
      - name: Push release
        shell: bash
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          git remote set-url --push origin https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
          git push -f --follow-tags origin main