release.yml

name: Release

on:
  workflow_dispatch:

permissions:
  contents: write
  id-token: write

jobs:
  release:
    uses: reactiveui/actions-common/.github/workflows/workflow-common-release.yml@main
    with:
      solutionFile: ReactiveUI.Binding.SourceGenerators.slnx
      installWorkloads: true
    secrets:
      ES_USERNAME: ${{ secrets.ES_USERNAME }}
      ES_PASSWORD: ${{ secrets.ES_PASSWORD }}
      CREDENTIAL_ID: ${{ secrets.CREDENTIAL_ID }}
      ES_TOTP_SECRET: ${{ secrets.ES_TOTP_SECRET }}

  publish-nuget:
    needs: release
    runs-on: ubuntu-latest
    environment:
      name: release
    permissions:
      id-token: write
    steps:
      - name: Download signed packages
        uses: actions/download-artifact@v8
        with:
          name: signed-nuget

      - name: Setup .NET
        uses: actions/setup-dotnet@v5

      - name: NuGet login (OIDC trusted publishing)
        id: nuget-login
        uses: NuGet/login@v1
        with:
          user: ${{ secrets.NUGET_USER }}

      - name: Push to NuGet
        shell: bash
        run: |
          for pkg in *.nupkg; do
            dotnet nuget push "$pkg" --source https://api.nuget.org/v3/index.json --api-key "${{ steps.nuget-login.outputs.NUGET_API_KEY }}"
          done

  create-release:
    needs: [release, publish-nuget]
    uses: reactiveui/actions-common/.github/workflows/workflow-common-create-release.yml@main
    with:
      version: ${{ needs.release.outputs.semver2 }}