ci: share Gitea CD publish action

.gitea/actions/publish/action.yml

@@ -0,0 +1,132 @@
+name: Publish portfolio
+description: Build the image and create the matching Gitea release
+
+inputs:
+  image-tag:
+    description: Docker image tag
+    required: true
+  prerelease:
+    description: Whether the Gitea release is a pre-release
+    required: true
+  registry-username:
+    description: Registry username
+    required: true
+  registry-password:
+    description: Registry password or token
+    required: true
+  gitea-token:
+    description: Token for Gitea releases
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node.js v24.15.0
+      uses: actions/setup-node@v4
+      with:
+        node-version: '24.15.0'
+
+    - name: Set build version
+      shell: bash
+      run: npm run version:set
+
+    - name: Read version from package.json
+      id: version
+      shell: bash
+      env:
+        PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        version=$(node -p 'require("./package.json").version')
+        release_tag="v${version//+/-}"
+        if [ "$PRERELEASE" = true ]; then
+          release_tag="${release_tag}-dev"
+        fi
+        echo "value=$version" >> "$GITHUB_OUTPUT"
+        echo "release_tag=$release_tag" >> "$GITHUB_OUTPUT"
+        echo "revision=$GITEA_RUN_ATTEMPT" >> "$GITHUB_OUTPUT"
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Log in to registry
+      uses: docker/login-action@v3
+      with:
+        registry: docker.lechner-systems.at
+        username: ${{ inputs.registry-username }}
+        password: ${{ inputs.registry-password }}
+
+    - name: Build and push image
+      uses: docker/build-push-action@v6
+      with:
+        context: .
+        push: true
+        provenance: false
+        build-args: |
+          APP_VERSION=${{ steps.version.outputs.value }}
+          VCS_REF=${{ steps.version.outputs.revision }}
+        tags: docker.lechner-systems.at/lechnersystems/portfolio:${{ inputs.image-tag }}
+
+    - name: Create Gitea release
+      shell: bash
+      env:
+        GITEA_TOKEN: ${{ inputs.gitea-token }}
+        RELEASE_TAG: ${{ steps.version.outputs.release_tag }}
+        PRERELEASE: ${{ inputs.prerelease }}
+      run: |
+        api_url="${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases"
+        # ponytail: 50 recent releases cover normal reruns; paginate if old releases are rebuilt.
+        releases="$(curl --fail-with-body --silent --show-error \
+            --header "Authorization: token ${GITEA_TOKEN}" \
+            "${api_url}?limit=50")"
+        previous_tag="$(printf '%s' "$releases" | jq -r \
+            --arg tag "$RELEASE_TAG" \
+            --argjson prerelease "$PRERELEASE" \
+            '[.[] | select(.draft == false and .prerelease == $prerelease and .tag_name != $tag)][0].tag_name // empty')"
+
+        if [ -n "$previous_tag" ]; then
+            commit_messages="$(git log --reverse --format='- %s' "${previous_tag}..${GITEA_SHA}")"
+            full_changelog="${{ gitea.server_url }}/${{ gitea.repository }}/compare/${previous_tag}...${RELEASE_TAG}"
+        else
+            commit_messages="$(git log --reverse --format='- %s' "${GITEA_SHA}")"
+            full_changelog=""
+        fi
+
+        if [ -z "$commit_messages" ]; then
+            commit_messages='- No commits since the previous release'
+        fi
+
+        {
+            echo '## Changes'
+            echo
+            printf '%s\n' "$commit_messages"
+            echo
+            if [ -n "$full_changelog" ]; then
+                echo "**Full Changelog**: ${full_changelog}"
+            fi
+        } > release-notes.md
+
+        jq --null-input \
+            --arg tag "$RELEASE_TAG" \
+            --arg target "$GITEA_SHA" \
+            --argjson prerelease "$PRERELEASE" \
+            --rawfile body release-notes.md \
+            '{tag_name: $tag, target_commitish: $target, name: $tag, body: $body, prerelease: $prerelease}' \
+            > release.json
+
+        release_id="$(printf '%s' "$releases" | jq -r \
+            --arg tag "$RELEASE_TAG" \
+            '.[] | select(.tag_name == $tag) | .id')"
+        if [ -n "$release_id" ]; then
+            method=PATCH
+            release_url="${api_url}/${release_id}"
+        else
+            method=POST
+            release_url="$api_url"
+        fi
+
+        curl --fail-with-body --silent --show-error \
+            --request "$method" \
+            --header "Authorization: token ${GITEA_TOKEN}" \
+            --header 'Content-Type: application/json' \
+            --data-binary @release.json \
+            "$release_url"