create_variants.yml

name: Create DMG Variants

on:
  workflow_dispatch:

  workflow_call:
    secrets:
      APPLE_API_KEY_BASE64:
        required: true
      APPLE_API_KEY_ID:
        required: true
      APPLE_API_KEY_ISSUER:
        required: true
      ASANA_ACCESS_TOKEN:
        required: true
      AWS_ACCESS_KEY_ID_RELEASE_S3:
        required: true
      AWS_SECRET_ACCESS_KEY_RELEASE_S3:
        required: true
      MATCH_PASSWORD:
        required: true
      MM_HANDLES_BASE64:
        required: true
      MM_WEBHOOK_URL:
        required: true
      SSH_PRIVATE_KEY_FASTLANE_MATCH:
        required: true

jobs:

  set-up-variants:

    name: Set Up Variants

    runs-on: macos-14
    timeout-minutes: 15

    outputs:
      build-variants-1: ${{ steps.get-build-variants.outputs.build-variants-1 }}
      build-variants-2: ${{ steps.get-build-variants.outputs.build-variants-2 }}

    steps:
      - name: Check out repository
        uses: actions/checkout@v4
        
      - name: Fetch Build Variants
        id: get-build-variants
        uses: ./.github/actions/asana-get-build-variants-list
        with:
          access-token: ${{ secrets.ASANA_ACCESS_TOKEN }}
          atb-asana-task-id: ${{ vars.DMG_VARIANTS_LIST_TASK_ID }}
          origin-asana-section-id: ${{ vars.DMG_VARIANTS_ORIGIN_SECTION_ID }}
          
  download-dmg-and-upload-artifact:

    name: Download Release App and upload artifact

    runs-on: macos-14
    timeout-minutes: 15

    steps:
      - name: Download release app
        run: |
          curl -fLSs "${{ vars.RELEASE_DMG_URL }}" --output duckduckgo.dmg

      - name: Upload DMG artifact
        uses: actions/upload-artifact@v4
        with:
          name: duckduckgo-dmg
          path: ${{ github.workspace }}/duckduckgo.dmg
          retention-days: 1

  create-variants-1:

    name: Create Variant
    needs: [set-up-variants, download-dmg-and-upload-artifact]

    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.set-up-variants.outputs.build-variants-1) }}
    uses: ./.github/workflows/create_variant.yml
    with:
      atb-variant: ${{ matrix.variant }}
      origin-variant: ${{ matrix.origin }}
    secrets:
      APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }}
      APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
      APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }}
      AWS_ACCESS_KEY_ID_RELEASE_S3: ${{ secrets.AWS_ACCESS_KEY_ID_RELEASE_S3 }}
      AWS_SECRET_ACCESS_KEY_RELEASE_S3: ${{ secrets.AWS_SECRET_ACCESS_KEY_RELEASE_S3 }}
      MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
      SSH_PRIVATE_KEY_FASTLANE_MATCH: ${{ secrets.SSH_PRIVATE_KEY_FASTLANE_MATCH }}

  create-variants-2:

    name: Create Variant
    needs: [set-up-variants, download-dmg-and-upload-artifact]

    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.set-up-variants.outputs.build-variants-2) }}
    uses: ./.github/workflows/create_variant.yml
    with:
      atb-variant: ${{ matrix.variant }}
      origin-variant: ${{ matrix.origin }}
    secrets:
      APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }}
      APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
      APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }}
      AWS_ACCESS_KEY_ID_RELEASE_S3: ${{ secrets.AWS_ACCESS_KEY_ID_RELEASE_S3 }}
      AWS_SECRET_ACCESS_KEY_RELEASE_S3: ${{ secrets.AWS_SECRET_ACCESS_KEY_RELEASE_S3 }}
      MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
      SSH_PRIVATE_KEY_FASTLANE_MATCH: ${{ secrets.SSH_PRIVATE_KEY_FASTLANE_MATCH }}
  
  mattermost:
    
    name: Send Mattermost message
    needs: [create-variants-1, create-variants-2]
    runs-on: macos-15
    
    env:
      success: ${{ needs.create-variants-1.result == 'success' && needs.create-variants-2.result == 'success' }}
      failure: ${{ needs.create-variants-1.result == 'failure' || needs.create-variants-2.result == 'failure' }}
    
    steps:
      - name: Check out the code
        if: ${{ env.success || env.failure }} # Don't execute when cancelled
        uses: actions/checkout@v4
        with:
          sparse-checkout: |
            .github
            Gemfile
            Gemfile.lock
            fastlane
            scripts

      - name: Set up fastlane
        if: ${{ env.success || env.failure }} # Don't execute when cancelled
        run: bundle install

      - name: Send Mattermost message
        if: ${{ env.success || env.failure }} # Don't execute when cancelled
        env:
          GH_TOKEN: ${{ github.token }}
          WORKFLOW_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
        run: |
          bundle exec fastlane run mattermost_send_message \
            mattermost_webhook_url:${{ secrets.MM_WEBHOOK_URL }} \
            github_handle:${{ github.actor }} \
            template_name:$([[ "${{ env.success }}" == "true" ]] && echo "variants-release-published" || echo "variants-release-failed")