deploy_pr_preview.yml

name: Deploy PR Preview (Innovation Hub)
on:
  pull_request:
    types:
      - opened
      - synchronize
      - ready_for_review
      - reopened

concurrency: # replaces use of n1hility/cancel-previous-runs
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build_deploy:
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    steps:
      # - uses: n1hility/cancel-previous-runs@v2
      #   with: 
      #     token: ${{ secrets.GITHUB_TOKEN }}
      - uses: actions/checkout@master
      - name: Use Node.js 18
        uses: actions/setup-node@v4.0.2
        with:
          node-version: 18.15.0
      - name: Get branch name (merge)
        if: github.event_name != 'pull_request'
        shell: bash
        run: echo "BRANCH_NAME=$(echo ${GITHUB_REF#refs/heads/})" >> $GITHUB_ENV
      - name: Get branch name (pull request)
        if: github.event_name == 'pull_request'
        shell: bash
        run: echo "BRANCH_NAME=$(echo ${GITHUB_HEAD_REF})" >> $GITHUB_ENV
      - name: Escape branch name for URL
        shell: bash
        run: echo "URLSAFE_BRANCH_NAME=$(echo ${BRANCH_NAME} | sed 's|[^A-Za-z0-9-]|-|g' | sed -E 's|-*([A-Za-z0-9]*.*[A-Za-z0-9]+)-*|\1|')" >> $GITHUB_ENV
      - name: Report escaped branch name
        shell: bash
        run: echo ${URLSAFE_BRANCH_NAME}
      - name: Build 11ty
        run: |
          mkdir _site
          mkdir _site_dist
          npm install --legacy-peer-deps
          DOMAIN=${URLSAFE_BRANCH_NAME}.pr.hub.innovation.ca.gov npm run build
          npm run readability
          DOMAIN=${URLSAFE_BRANCH_NAME}.pr.hub.innovation.ca.gov npm run build
      - name: Write robots.txt
        run: |
          echo 'User-agent: *' > _site/robots.txt
          echo 'Disallow: /' >> _site/robots.txt
      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: us-west-1
      - name: Deploy to S3
        run: aws s3 sync --follow-symlinks --delete ./_site s3://pr.hub.innovation.ca.gov/pr/${URLSAFE_BRANCH_NAME}
      - name: invalidate Cloudfront
        run: aws cloudfront create-invalidation --distribution-id E2FU9OXT3L3CRY --paths "/*"
      - name: Post URL to PR
        uses: mshick/add-pr-comment@v2.8.2
        with:
          message: |
            Preview site available at [${{ env.URLSAFE_BRANCH_NAME }}.pr.hub.innovation.ca.gov](https://${{ env.URLSAFE_BRANCH_NAME }}.pr.hub.innovation.ca.gov/).
          # repo-token: ${{ secrets.GITHUB_TOKEN }}
          # repo-token-user-login: 'github-actions[bot]'
          allow-repeats: false