python-package.yml

# CI: lint + test (semua push/PR). Lalu pada push ke main:
#   - Release otomatis dengan versi SemVer dari conventional commits:
#     feat: -> MINOR, fix:/lainnya -> PATCH, BREAKING CHANGE -> MAJOR
#   - Docker image di-push ke GitHub Container Registry (ghcr.io)
#
# Matrix versi Python: kubernetes>=30.1.0 ter-resolve ke 36.x yang
# membutuhkan Python >=3.10, jadi 3.9 tidak lagi didukung.

name: Python package

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]

permissions:
  contents: read

jobs:
  build:

    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ["3.10", "3.11", "3.12"]

    steps:
    - uses: actions/checkout@v4
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@v5
      with:
        python-version: ${{ matrix.python-version }}
    - name: Install dependencies
      run: |
        python -m pip install --upgrade pip
        python -m pip install flake8 pytest
        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
    - name: Lint with flake8
      run: |
        # stop the build if there are Python syntax errors or undefined names
        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
        # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
        flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
    - name: Test with pytest
      run: |
        pytest

  release:
    needs: build
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
    - uses: actions/checkout@v4
      with:
        fetch-depth: 0   # riwayat penuh + semua tag

    - name: Hitung versi otomatis dari conventional commits
      id: version
      run: |
        LATEST=$(git tag --list 'v*' --sort=-v:refname | head -1 || true)
        if [ -z "$LATEST" ]; then
          NEXT="1.0.0"
        else
          BASE="${LATEST#v}"
          MAJOR="${BASE%%.*}"
          REST="${BASE#*.}"
          MINOR="${REST%%.*}"
          PATCH="${REST#*.}"

          # Bump mengikuti conventional commits sejak tag terakhir:
          #   BREAKING CHANGE / type!: -> MAJOR
          #   feat:                    -> MINOR
          #   lainnya (fix:, chore:)   -> PATCH
          COMMITS=$(git log --no-merges --format='%s%n%b' "$LATEST"..HEAD || true)
          if echo "$COMMITS" | grep -Eqi 'BREAKING[ _-]?CHANGE|^[a-z]+(\([^)]*\))?!:'; then
            MAJOR=$((10#$MAJOR + 1)); MINOR=0; PATCH=0
          elif echo "$COMMITS" | grep -Eqi '^feat(\([^)]*\))?:'; then
            MINOR=$((10#$MINOR + 1)); PATCH=0
          else
            PATCH=$((10#$PATCH + 1))
          fi
          NEXT="${MAJOR}.${MINOR}.${PATCH}"
        fi
        echo "version=${NEXT}" >> "$GITHUB_OUTPUT"
        echo "Tag terakhir: '${LATEST:-tidak ada}' -> versi baru: ${NEXT}"

    - name: Susun catatan rilis dari commit
      run: |
        PREV=$(git describe --tags --abbrev=0 2>/dev/null || true)
        if [ -n "$PREV" ]; then
          git log --oneline --no-merges "$PREV"..HEAD > RELEASE_NOTES.md
        else
          git log --oneline --no-merges > RELEASE_NOTES.md
        fi

    - name: Buat GitHub Release
      env:
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      run: |
        gh release create "v${{ steps.version.outputs.version }}" \
          --title "v${{ steps.version.outputs.version }}" \
          --notes-file RELEASE_NOTES.md

  docker:
    needs: build
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read

    steps:
    - uses: actions/checkout@v4
      with:
        fetch-depth: 0   # butuh semua tag untuk menghitung versi

    - name: Hitung versi otomatis dari conventional commits
      id: version
      run: |
        LATEST=$(git tag --list 'v*' --sort=-v:refname | head -1 || true)
        if [ -z "$LATEST" ]; then
          NEXT="1.0.0"
        else
          BASE="${LATEST#v}"
          MAJOR="${BASE%%.*}"
          REST="${BASE#*.}"
          MINOR="${REST%%.*}"
          PATCH="${REST#*.}"

          # Bump mengikuti conventional commits sejak tag terakhir:
          #   BREAKING CHANGE / type!: -> MAJOR
          #   feat:                    -> MINOR
          #   lainnya (fix:, chore:)   -> PATCH
          COMMITS=$(git log --no-merges --format='%s%n%b' "$LATEST"..HEAD || true)
          if echo "$COMMITS" | grep -Eqi 'BREAKING[ _-]?CHANGE|^[a-z]+(\([^)]*\))?!:'; then
            MAJOR=$((10#$MAJOR + 1)); MINOR=0; PATCH=0
          elif echo "$COMMITS" | grep -Eqi '^feat(\([^)]*\))?:'; then
            MINOR=$((10#$MINOR + 1)); PATCH=0
          else
            PATCH=$((10#$PATCH + 1))
          fi
          NEXT="${MAJOR}.${MINOR}.${PATCH}"
        fi
        echo "version=${NEXT}" >> "$GITHUB_OUTPUT"

    - name: Login ke GHCR
      uses: docker/login-action@v3
      with:
        registry: ghcr.io
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    - name: Build & push image
      uses: docker/build-push-action@v6
      with:
        context: .
        push: true
        tags: |
          ghcr.io/${{ github.repository }}:${{ steps.version.outputs.version }}
          ghcr.io/${{ github.repository }}:latest