publish.yml

name: Publish API docs
run-name: "Publish: ${{ github.ref_name }}"

on:
  push:
    tags:
      - 'v[1-9]*'

permissions:
  contents: read

defaults:
  run:
    shell: bash --noprofile --norc -euo pipefail {0}

jobs:
  publish:
    name: Build and publish API documentation
    if: "!contains(github.ref_name, '-rc.')"
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - name: Publish docs
        env:
          TAG: ${{ github.ref_name }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_DEFAULT_REGION: ${{ vars.AWS_DEFAULT_REGION }}
        run: scripts/publish.sh "$TAG"