firebase.yml

name: Build and Deploy to Firebase

on:
  push:
    branches:
      - master

jobs:
  build-deploy:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout source code
        uses: actions/checkout@v7
        with:
          # Full history: _plugins/posts-lastmod-hook.rb derives each post's
          # last-modified date from git log, which a shallow clone cannot provide.
          fetch-depth: 0

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Install dependencies
        run: |
          bundle install

      - name: Build Jekyll
        run: |
          bundle exec jekyll build
        env:
          JEKYLL_ENV: production

      - name: Deploy to Firebase
        run: |
          # Preserve the firebase-tools exit status when the output is piped through tee.
          set -o pipefail
          echo "$GCP_SA_KEY" | base64 -d > /tmp/gcp_key.json
          deploy_log=$(mktemp /tmp/firebase-deploy.XXXXXX.log)
          if GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp_key.json npx firebase-tools deploy --only hosting --project zhe-dev 2>&1 | tee "$deploy_log"; then
            rm -f "$deploy_log"
            exit 0
          fi

          # Firebase Hosting returns this release error when the uploaded version is already live.
          if grep -Eq "Can't release to .*current active version" "$deploy_log"; then
            echo "Firebase Hosting already serves this version; treating deploy as successful."
            rm -f "$deploy_log"
            exit 0
          fi

          rm -f "$deploy_log"
          exit 1
        env:
          GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

      - name: Clean up credentials
        if: always()
        run: rm -f /tmp/gcp_key.json