element-web/.github/workflows/deploy.yml

# Manual deploy workflow for deploying to app.element.io & staging.element.io
# Runs automatically for staging.element.io when an RC or Release is published
# Note: Does *NOT* run automatically for app.element.io so that it gets tested on staging.element.io beforehand
name: Deploy release
run-name: Deploy ${{ github.ref_name }} to ${{ inputs.site || 'staging.element.io' }}
on:
    release:
        types: [published]
    workflow_dispatch:
        inputs:
            site:
                description: Which site to deploy to
                required: true
                default: staging.element.io
                type: choice
                options:
                    - staging.element.io
                    - app.element.io
            skip-checks:
                description: Skip CI on the tagged commit
                required: true
                default: false
                type: boolean
concurrency: ${{ inputs.site || 'staging.element.io' }}
permissions: {}
jobs:
    deploy:
        name: "Deploy to Cloudflare Pages"
        runs-on: ubuntu-24.04
        environment: ${{ inputs.site || 'staging.element.io' }}
        permissions:
            checks: read
            deployments: write
        env:
            SITE: ${{ inputs.site || 'staging.element.io' }}
        steps:
            - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
              with:
                  persist-credentials: false

            - name: Load GPG key
              run: |
                  curl https://packages.element.io/element-release-key.gpg | gpg --import
                  gpg -k "$GPG_FINGERPRINT"
              env:
                  GPG_FINGERPRINT: ${{ vars.GPG_FINGERPRINT }}

            - name: Check current version on deployment
              id: current_version
              run: |
                  version=$(curl -s https://$SITE/version)
                  echo "version=${version#v}" >> $GITHUB_OUTPUT

            # The current version bundle melding dance is skipped if the version we're deploying is the same
            # as then we're just doing a re-deploy of the same version with potentially different configs.
            - name: Download current version for its old bundles
              id: current_download
              if: steps.current_version.outputs.version != github.ref_name
              uses: ./.github/actions/download-verify-element-tarball
              with:
                  tag: v${{ steps.current_version.outputs.version }}
                  out-file-path: _current_version

            - name: Download target version
              uses: ./.github/actions/download-verify-element-tarball
              with:
                  tag: ${{ github.ref_name }}
                  out-file-path: _deploy

            - name: Merge current bundles into target
              if: steps.current_download.outcome == 'success'
              run: cp -vnpr _current_version/bundles/* _deploy/bundles/

            - name: Copy config
              run: cp apps/web/element.io/app/config.json _deploy/config.json

            - name: Populate 404.html
              run: echo "404 Not Found" > _deploy/404.html

            - name: Populate _headers
              run: cp .github/cfp_headers _deploy/_headers

            - name: Wait for other steps to succeed
              uses: t3chguy/wait-on-check-action@18541021811b56544d90e0f073401c2b99e249d6 # fork
              if: inputs.skip-checks != true
              with:
                  ref: ${{ github.sha }}
                  running-workflow-name: "Deploy to Cloudflare Pages"
                  repo-token: ${{ secrets.GITHUB_TOKEN }}
                  wait-interval: 10
                  check-regexp: ^((?!SonarCloud|SonarQube|issue|board|label|Release|prepare|GitHub Pages).)*$

            - name: Deploy to Cloudflare Pages
              uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
              with:
                  apiToken: ${{ secrets.CF_PAGES_TOKEN }}
                  accountId: ${{ secrets.CF_PAGES_ACCOUNT_ID }}
                  command: pages deploy _deploy --project-name ${{ env.SITE == 'staging.element.io' && 'element-web-staging' || 'element-web' }} --branch main
                  gitHubToken: ${{ secrets.GITHUB_TOKEN }}