manual_release_docs.yaml

name: Release docs

on:
  # Runs when manually triggered from the GitHub UI.
  workflow_dispatch:
    inputs:
      ref:
        description: Commit SHA or ref to build the docs from. If empty, the triggering ref is used.
        required: false
        type: string
        default: ""

  # Runs when invoked by another workflow.
  workflow_call:
    inputs:
      ref:
        description: Commit SHA or ref to build the docs from. If empty, the triggering ref is used.
        required: false
        type: string
        default: ""

permissions:
  contents: read

env:
  NODE_VERSION: 24
  PYTHON_VERSION: 3.14

jobs:
  release_docs:
    name: Release docs
    environment:
      name: github-pages
    permissions:
      contents: write
      pages: write
      id-token: write
      checks: read
    runs-on: ubuntu-latest

    steps:
      # Gate manual dispatches on the `Checks` workflow already succeeding on this commit (run by `on_master.yaml`);
      # skipped when called from another workflow.
      - name: Wait for checks
        if: github.event_name == 'workflow_dispatch'
        uses: apify/actions/wait-for-checks@v1.6.2
        with:
          ref: ${{ github.sha }}
          check-regexp: ^Checks

      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          ref: ${{ inputs.ref }}
          token: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}

      - name: Set up Node
        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          check-latest: true

      - name: Set up Python
        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - name: Set up uv package manager
        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
        with:
          python-version: ${{ env.PYTHON_VERSION }}

      - name: Install Python dependencies
        run: uv run poe install-dev

      - name: Install pnpm and website dependencies
        uses: apify/actions/pnpm-install@v1.6.2
        with:
          working-directory: website

      - name: Update docs theme
        run: uv run poe update-docs-theme

      - name: Commit the updated package.json and lockfile
        uses: apify/actions/signed-commit@v1.6.2
        with:
          message: "chore: Automatic docs theme update [skip ci]"
          add: website/package.json website/pnpm-lock.yaml
          pull: --rebase --autostash
          github-token: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}

      - name: Build docs
        run: uv run poe build-docs
        env:
          APIFY_SIGNING_TOKEN: ${{ secrets.APIFY_SIGNING_TOKEN }}
          SEGMENT_TOKEN: ${{ secrets.SEGMENT_TOKEN }}

      - name: Set up GitHub Pages
        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0

      - name: Upload GitHub Pages artifact
        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
        with:
          path: ./website/build

      - name: Deploy artifact to GitHub Pages
        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

      - name: Invalidate CloudFront cache
        run: |
          gh workflow run invalidate-cloudfront.yml \
            --repo apify/apify-docs-private \
            --field deployment=apify-docs
          echo "✅ CloudFront cache invalidation workflow triggered successfully"
        env:
          GITHUB_TOKEN: ${{ secrets.APIFY_SERVICE_ACCOUNT_GITHUB_TOKEN }}