firebase-ios-sdk/.github/workflows/release.cpp.update.yml

# Whenever a new Firebase iOS SDK is released, this workflow triggers *another*
# workflow on the Firebase C++ SDK, which will check for the iOS version update
# and create a PR updating its iOS dependencies if the version number has
# changed.
name: release.cpp.update
on:
  workflow_dispatch:
  release:
    types: [ published ]

permissions:
  contents: read

concurrency:
    group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
    cancel-in-progress: true

jobs:
  trigger_cpp_sdk_update:
    # Only when a new release (not just the CocoaPods-* tag) is published.
    if: ${{ (github.event_name == 'release' && !contains(github.ref, 'CocoaPods')) }}
    # Fetch an authentication token for firebase-workflow-trigger, then use that
    # token to trigger the update-dependencies workflow in firebase-cpp-sdk.
    name: Trigger C++ SDK update
    runs-on: ubuntu-24.04
    steps:
      - name: Setup python
        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
        with:
          python-version: 3.11

      - name: Check out firebase-cpp-sdk
        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          repository: firebase/firebase-cpp-sdk
          ref: main
          persist-credentials: false

      - name: Get firebase-workflow-trigger token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        id: generate-token
        with:
          app-id: ${{ secrets.CPP_WORKFLOW_TRIGGER_APP_ID }}
          private-key: ${{ secrets.CPP_WORKFLOW_TRIGGER_APP_PRIVATE_KEY }}
          repositories: firebase-cpp-sdk
          permission-actions: write

      - name: Ensure Cocoapods repo has been updated
        run: |
          # If the new version is simply vX.Y.Z or X.Y.Z, wait up to an hour each for its podspec and prebuilt zip file to be present.
          if [[ "$GITHUB_REF" =~ ^(refs/tags/)?v?[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
            version=$(echo "$GITHUB_REF" | sed 's|^refs/tags/||' | sed s/^v//)  # remove leading refs/tags and v if present
            echo "Checking Cocoapods repo for associated Firebase ${version} podspec."
            podspec_url="https://github.com/CocoaPods/Specs/blob/master/Specs/0/3/5/Firebase/${version}/Firebase.podspec.json"
            for retry in {1..12} error; do
              # Check every 5 minutes, up to an hour, for the new podspec to be present.
              # If it's still not present, trigger the update anyway.
              if [[ $retry == "error" ]]; then
                echo "::warning ::Firebase ${version} podspec not found, updating anyway."
                exit 0
              fi
              echo -n "Check ${podspec_url} (attempt ${retry}) ..."
              curl -H 'Authorization: token ${{ github.token }}' -L -f -o /dev/null "${podspec_url}" 2> /dev/null && echo " success!" && break
              echo " failed."
              sleep 300
            done
            echo "Checking firebase-ios-sdk repo for ${version} prebuilt zip."
            # Check for the zip file on this actual release URL (which might include the leading v)
            zipfile_url="https://github.com/firebase/firebase-ios-sdk/releases/download/${GITHUB_REF}/Firebase.zip"
            for retry in {1..12} error; do
              # Check every 5 minutes, up to an hour, for the new zip file to be present.
              # If it's still not present, trigger the update anyway.
              if [[ $retry == "error" ]]; then
                echo "::warning ::Firebase ${version} zip file not found, updating anyway."
                exit 0
              fi
              echo -n "Check ${zipfile_url} (attempt ${retry}) ..."
              # curl's "-r 0-0" option means only download the first byte, this prevents us from downloading 300+ MB.
              curl -H 'Authorization: token ${{ github.token }}' -L -f -o /dev/null -r 0-0 "${zipfile_url}" 2> /dev/null && echo " success!" && break
              echo " failed."
              sleep 300
            done
          else
            echo "Tag '$GITHUB_REF' doesn't match the 'vX.Y.Z' or 'X.Y.Z' format, skipping Cocoapods repo and release zip check."
          fi

      - name: Trigger firebase-cpp-sdk update
        run: |
          pip install -r scripts/gha/python_requirements.txt
          python scripts/gha/trigger_workflow.py -t ${STEPS_GENERATE_TOKEN_OUTPUTS_TOKEN} -w update-dependencies.yml -p updateAndroid 0 -p updateiOS 1 -p comment "[Triggered]($GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID) by [firebase-ios-sdk $GITHUB_REF release]($GITHUB_SERVER_URL/$GITHUB_REPOSITORY/releases/tag/$GITHUB_REF)." -s 10 -A
        env:
          STEPS_GENERATE_TOKEN_OUTPUTS_TOKEN: ${{ steps.generate-token.outputs.token }}