name: Build and release extension

on:

push:

branches:

- release

permissions:

contents: write

jobs:

release:

runs-on: ubuntu-latest

env:

CHROME_EXTENSION_ID: ${{ secrets.CHROME_EXTENSION_ID }}

CHROME_CLIENT_ID: ${{ secrets.CHROME_CLIENT_ID }}

CHROME_CLIENT_SECRET: ${{ secrets.CHROME_CLIENT_SECRET }}

CHROME_REFRESH_TOKEN: ${{ secrets.CHROME_REFRESH_TOKEN }}

steps:

- name: Checkout

uses: actions/checkout@v4

- name: Setup Node

uses: actions/setup-node@v4

with:

node-version: 22

cache: npm

- name: Install dependencies

run: npm ci

- name: Stamp release version

run: npm run update-version

env:

RELEASE_VERSION: 1.0.${{ github.run_number }}

AMO_EXTENSION_ID: ${{ secrets.AMO_EXTENSION_ID }}

- name: Run ESLint

run: npm run lint

- name: Run Type check

run: npx tsc --noEmit

- name: Run tests

run: npm test

- name: Build

run: npm run build

- name: Verify build outputs

run: |

test -d dist/chrome

test -d dist/firefox

- name: Zip Chrome

working-directory: dist/chrome

run: zip -r ../../chrome-extension.zip .

- name: Zip Firefox

working-directory: dist/firefox

run: zip -r ../../firefox-extension.zip .

- name: Validate release tag

id: tag

run: |

VERSION=$(node -p "require('./package.json').version")

TAG="v$VERSION"

git fetch --tags

if git rev-parse "$TAG" >/dev/null 2>&1; then

echo "Tag $TAG already exists. Bump package.json version and push again."

exit 1

fi

echo "tag=$TAG" >> "$GITHUB_OUTPUT"

- name: Create GitHub release

uses: softprops/action-gh-release@v2

with:

tag_name: ${{ steps.tag.outputs.tag }}

name: ${{ steps.tag.outputs.tag }}

target_commitish: ${{ github.sha }}

generate_release_notes: true

files: |

chrome-extension.zip

firefox-extension.zip

env:

GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

- name: Publish to Chrome Web Store

uses: mnao305/[email protected]

with:

file-path: chrome-extension.zip

extension-id: ${{ secrets.CHROME_EXTENSION_ID }}

client-id: ${{ secrets.CHROME_CLIENT_ID }}

client-secret: ${{ secrets.CHROME_CLIENT_SECRET }}

refresh-token: ${{ secrets.CHROME_REFRESH_TOKEN }}

publish: true

- name: Publish to Firefox Add-ons (AMO)

run: |

if [ -z "$AMO_API_KEY" ] || [ -z "$AMO_API_SECRET" ]; then

echo "AMO secrets not set, skipping Firefox publish."

exit 0

fi

npx --yes [email protected] sign \

--source-dir dist/firefox \

--channel listed \

--api-key "$AMO_API_KEY" \

--api-secret "$AMO_API_SECRET" \

--api-url-prefix https://addons.mozilla.org/api/v5 \

--approval-timeout 0

env:

AMO_API_KEY: ${{ secrets.AMO_API_KEY }}

AMO_API_SECRET: ${{ secrets.AMO_API_SECRET }}