ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
      - release/**
    types: [opened, synchronize, reopened, ready_for_review]
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  detect:
    name: Detect Changes
    runs-on: [public-repo]
    container:
      image: ubuntu:24.04
    if: github.event_name != 'pull_request' || github.event.pull_request.draft == false
    permissions:
      contents: read
      pull-requests: read
    outputs:
      php: ${{ steps.filter.outputs.php }}
      phpcs: ${{ steps.filter.outputs.phpcs }}
      phpstan: ${{ steps.filter.outputs.phpstan }}
      phpunit: ${{ steps.filter.outputs.phpunit }}
      js: ${{ steps.filter.outputs.js }}
      css: ${{ steps.filter.outputs.css }}
      e2e: ${{ steps.filter.outputs.e2e }}
      jest: ${{ steps.filter.outputs.jest }}

    steps:
      - name: Install system dependencies
        run: |
          apt-get update
          apt-get install -y git

      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Configure Git for Safe Directory
        run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"

      - name: Detect file changes
        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
        id: filter
        with:
          filters: |
            php:
              - '**.php'
              - 'composer.*'
            phpcs:
              - '.phpcs.xml.dist'
              - '.github/workflows/reusable-phpcs.yml'
            phpstan:
              - 'phpstan.neon.dist'
              - '.github/workflows/reusable-phpstan.yml'
            phpunit:
              - 'tests/**/*.php'
              - 'phpunit.xml.dist'
              - '.github/workflows/reusable-phpunit.yml'
              - 'package*.json'
            js:
              - '**.cjs'
              - '**.js'
              - '**.jsx'
              - '**.mjs'
              - '**.cts'
              - '**.mts'
              - '**.ts'
              - '**.tsx'
              - 'package*.json'
              - '.eslintrc*'
              - 'tsconfig*.json'
            css:
              - '**.css'
              - '**.scss'
              - '.stylelintignore'
              - '.stylelintrc*'
            e2e:
              - 'tests/e2e/**/*'
              - '.github/workflows/reusable-e2e.yml'
            jest:
              - 'tests/js/**/*'
              - 'src/**/__tests__/**/*'
              - 'src/**/*.test.ts'
              - 'src/**/*.test.tsx'
              - 'src/**/*.spec.ts'
              - 'src/**/*.spec.tsx'
              - 'jest.config.js'
              - '.github/workflows/reusable-jest.yml'
              - 'package*.json'

  phpcs:
    name: PHPCS
    needs: detect
    if: needs.detect.outputs.php == 'true' || needs.detect.outputs.phpcs == 'true'
    uses: ./.github/workflows/reusable-phpcs.yml
    permissions:
      contents: read
    with:
      php-version: '8.2'

  phpstan:
    name: PHPStan
    needs: detect
    if: needs.detect.outputs.php == 'true' || needs.detect.outputs.phpstan == 'true'
    uses: ./.github/workflows/reusable-phpstan.yml
    permissions:
      contents: read
    with:
      php-version: '8.2'

  lint-css-js:
    name: CSS/JS Lint
    needs: detect
    if: needs.detect.outputs.css == 'true' || needs.detect.outputs.js == 'true'
    uses: ./.github/workflows/reusable-lint-css-js.yml
    permissions:
      contents: read

  jest:
    name: Jest Unit Tests
    needs: detect
    if: needs.detect.outputs.js == 'true' || needs.detect.outputs.jest == 'true'
    uses: ./.github/workflows/reusable-jest.yml
    permissions:
      contents: read
    with:
      coverage: true

  phpunit:
    name: PHPUnit (PHP ${{ matrix.php }}, WP ${{ matrix.wp }})
    needs: detect
    if: needs.detect.outputs.php == 'true' || needs.detect.outputs.phpunit == 'true'
    uses: ./.github/workflows/reusable-phpunit.yml
    permissions:
      contents: read
    strategy:
      fail-fast: false
      max-parallel: 1
      matrix:
        php: ['8.4', '8.3', '8.2']
        wp: ['latest']
        include:
          - php: '8.4'
            wp: 'latest'
            coverage: true
    with:
      php-version: ${{ matrix.php }}
      wp-version: ${{ matrix.wp }}
      coverage: ${{ matrix.coverage == true }}
    secrets: inherit

  e2e:
    name: E2E Tests
    needs: [detect, phpunit]
    if: needs.detect.result == 'success' && (needs.phpunit.result == 'success' || needs.phpunit.result == 'skipped') && (needs.detect.outputs.php == 'true' || needs.detect.outputs.e2e == 'true' || needs.detect.outputs.js == 'true' || needs.detect.outputs.css == 'true')
    uses: ./.github/workflows/reusable-e2e.yml
    permissions:
      contents: read
    with:
      php-version: '8.2'

  build-plugin-zip:
    name: Build Plugin Zip
    needs: [e2e]
    if: needs.e2e.result == 'success' || needs.e2e.result == 'skipped'
    permissions:
      contents: read
    uses: ./.github/workflows/reusable-build.yml
    with:
      php-version: '8.2'
      artifact-name: plugin-skeleton-d-pr${{ github.event.pull_request.number }}-${{ github.event.pull_request.head.sha }}
    secrets: inherit

  playground-preview:
    name: Playground Preview
    needs: build-plugin-zip
    if: github.event_name == 'pull_request'
    uses: ./.github/workflows/reusable-wp-playground-pr-preview.yml
    permissions:
      actions: read
      contents: write
      pull-requests: write
    with:
      run-id: ${{ github.run_id }}
      artifact-prefix: 'plugin-skeleton-d-pr'
      artifact-filename: 'plugin-skeleton-d.zip'