Migrate publish to gh actions (#1312)

Summary:
2/2 commit converting Circle CI to Github actions.

Removed Circle CI to ensure we don't try to publish a version twice.

* Added the "deploy" step that only runs for tag pushes
* It waits for testing and validation, and fails if either of them fails
* This PR uses `--dry-run` to ensure no publish happens unexpectedly. This arg will be removed in a subsequent PR.

Pull Request resolved: #1312

Test Plan:
Successful CI with no deployment step when a PR is updated-
https://github.com/facebook/metro/actions/runs/10269830075
 {F1796157419}

Successful **DRY RUN** deploy from a hotfix branch (works pretty much the same on main)-
https://github.com/facebook/metro/actions/runs/10269576329/job/28415382215
 {F1796157706}

Deploy fails for a wrongly formatted tag (used tag "bad-tag-name") with a clear error-
https://github.com/facebook/metro/actions/runs/10269509288/job/28415186326
{F1796157882}

Deploy fails for a tag pushed from a branch **not following** the Metro's release branch naming conventions
 {F1796158249}

Differential Revision: D60961268

Pulled By: vzaidman

.github/scripts/publish.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+# Copyright (c) Meta Platforms, Inc. and affiliates.
+#
+# This source code is licensed under the MIT license found in the
+# LICENSE file in the root directory of this source tree.
+
+echo "Trying to publish the package to npm for tag $RAW_TAG_NAME"
+
+# Validate tag's format follows conventions eg v0.1.22 or v0.90.2-alpha.5
+if [[ "$RAW_TAG_NAME" =~ ^v[0-9]+(\.[0-9]+){2}(-.*)?$ ]]; then
+  echo "The tag is valid.";
+else
+  echo "ERROR: The tag's format is wrong.";
+  exit 1
+fi
+
+# Does main contain this tag? (regular release workflow)
+TAG_ON_MAIN=$(git branch -a --contains "$RAW_TAG_NAME" | grep -cFx '  remotes/origin/main' || true)
+echo "Tag is on main branch: $TAG_ON_MAIN"
+
+# See https://github.com/facebook/metro/pull/1086 regarding handling of hotfix tags
+# Deduce the expected name of a release branch for a tag based on Metro's release branch naming convention, eg v0.1.2-alpha.3 -> 0.1.x
+RELEASE_BRANCH=$(echo "$RAW_TAG_NAME" | awk -F. '{print substr($1, 2) "." $2 ".x"}')
+
+# Does a release branch contain this tag? (hotfix workflow)
+git fetch origin ${RELEASE_BRANCH}
+TAG_ON_RELEASE_BRANCH=$(git branch -a --contains "$RAW_TAG_NAME" | grep -cFx "  remotes/origin/$RELEASE_BRANCH" || true)
+echo "Tag is on release branch $RELEASE_BRANCH: $TAG_ON_RELEASE_BRANCH"
+
+if [ $TAG_ON_RELEASE_BRANCH -eq $TAG_ON_MAIN ]; then
+    echo "Could not determine whether this tag is 'latest' or a hotfix. Aborting."
+    exit 1
+fi
+
+NPM_TAG="latest"
+# Use a tag name like "0.123-stable" as the dist-tag for a hotfix. This *must not* be valid semver.
+[ "$TAG_ON_RELEASE_BRANCH" -eq 1 ] && NPM_TAG="${RELEASE_BRANCH%.x}-stable"
+
+echo "Publishing with --tag=$NPM_TAG"
+
+npm run publish --tag="$NPM_TAG" --dry-run

.github/workflows/build-and-test.yml → .github/workflows/build-test-and-deploy.yml

@@ -1,12 +1,19 @@
-name: facebook/metro/build-and-test
+name: facebook/metro/build-test-and-deploy
 on:
   pull_request:
     types: [opened, synchronize]
+  push:
+    tags:
+# The job is triggered for any tag push. Tag format validation will be done
+# as part of the deploy job for clearer error reporting on tag formatting
+      - '**'
 
-# head_ref is per PR, so this ensures that updating the latest PR commit
-# will cancel the previous run of the workflow and trigger a new one
+# ref us unique per PR (refs/pull/<pr_number>/merge)
+# and per pushed tag (refs/tags/<tag_name>)
+# So this makes sure that previous CI for the same PR/tag
+# are cancelled when a newer one is triggered
 concurrency:
-  group: "build-and-test-${{ github.head_ref }}"
+  group: "build-test-and-deploy-${{ github.ref }}"
   cancel-in-progress: true
 
 defaults:
@@ -49,3 +56,18 @@ jobs:
           node-version: ${{ matrix.node-version }}
       - name: Run Jest Tests
         run: yarn jest --ci --maxWorkers 4 --reporters=default --reporters=jest-junit --rootdir='./'
+
+  deploy:
+    # runs only on tag pushes
+    if: ${{ github.ref_type == 'tag' }}
+    runs-on: ubuntu-latest
+    name: "Deploy"
+    needs: [run-js-checks, test]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/yarn-install
+      - run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" >> ~/.npmrc
+      - run: "./.github/scripts/publish.sh"
+        env:
+          RAW_TAG_NAME: ${{ github.ref_name }}
+      - run: rm ~/.npmrc