validate.yml

name: Validate site

# The site deploys to Cloudflare Pages from main only (.github/workflows/deploy.yml).
# This workflow is the pull-request gate: it proves the site builds, that every
# internal link resolves, and that the download URLs the site advertises match the
# public release channel. Without it a broken build would only surface at deploy
# time, after the merge.

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

env:
  ZOLA_VERSION: "0.22.1"

jobs:
  build:
    name: Build and check links
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Install Zola ${{ env.ZOLA_VERSION }}
        run: |
          curl --fail --location --silent --show-error \
            "https://github.com/getzola/zola/releases/download/v${ZOLA_VERSION}/zola-v${ZOLA_VERSION}-x86_64-unknown-linux-gnu.tar.gz" \
            | tar xz
          sudo mv zola /usr/local/bin
          zola --version

      - name: Build site
        # Zola fails the build on broken internal links.
        run: zola build

      - name: Verify the build produced pages
        run: |
          pages=$(find public -name '*.html' | wc -l)
          echo "Generated ${pages} HTML pages"
          if [ "${pages}" -lt 10 ]; then
            echo "::error::Expected at least 10 generated pages, found ${pages}"
            exit 1
          fi
          test -f public/index.html || { echo "::error::public/index.html is missing"; exit 1; }

      - name: Upload site
        uses: actions/upload-artifact@v4
        with:
          name: site-public
          path: public/
          retention-days: 7

  release-links:
    name: Check release channel links
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6

      - name: Verify advertised downloads exist on the public channel
        run: python3 scripts/check-release-links.py