chore(ci): authenticate release issue by approval comment

config/release.config.json

@@ -3,6 +3,7 @@
   "mainBranch": "main",
   "owner": "algolia",
   "repo": "api-clients-automation",
+  "teamSlug": "api-clients-automation",
   "targetBranch": {
     "javascript": "next",
     "php": "next",

scripts/release/common.ts

@@ -8,6 +8,7 @@ export const RELEASED_TAG = config.releasedTag;
 export const MAIN_BRANCH = config.mainBranch;
 export const OWNER = config.owner;
 export const REPO = config.repo;
+export const TEAM_SLUG = config.teamSlug;
 export const MAIN_PACKAGE = Object.keys(clientsConfig).reduce(
   (mainPackage: { [lang: string]: string }, lang: string) => {
     return {

scripts/release/process-release.ts

@@ -2,6 +2,7 @@
 import fsp from 'fs/promises';
 import path from 'path';
 
+import { Octokit } from '@octokit/rest';
 import dotenv from 'dotenv';
 import execa from 'execa';
 import { copy, remove } from 'fs-extra';
@@ -23,6 +24,7 @@ import {
   RELEASED_TAG,
   OWNER,
   REPO,
+  TEAM_SLUG,
   getMarkdownSection,
   configureGitHubAuthor,
   cloneRepository,
@@ -32,6 +34,10 @@ import type { VersionsToRelease } from './types';
 
 dotenv.config({ path: ROOT_ENV_PATH });
 
+const octokit = new Octokit({
+  auth: `token ${process.env.GITHUB_TOKEN}`,
+});
+
 type BeforeClientGenerationCommand = (params: {
   releaseType: ReleaseType;
   dir: string;
@@ -45,14 +51,16 @@ const BEFORE_CLIENT_GENERATION: {
   },
 };
 
-function getIssueBody(): string {
-  return JSON.parse(
-    execa.sync('curl', [
-      '-H',
-      `Authorization: token ${process.env.GITHUB_TOKEN}`,
-      `https://api.github.com/repos/${OWNER}/${REPO}/issues/${process.env.EVENT_NUMBER}`,
-    ]).stdout
-  ).body;
+async function getIssueBody(): Promise<string> {
+  const {
+    data: { body },
+  } = await octokit.rest.issues.get({
+    owner: OWNER,
+    repo: REPO,
+    issue_number: Number(process.env.EVENT_NUMBER),
+  });
+
+  return body ?? '';
 }
 
 function getDateStamp(): string {
@@ -149,6 +157,25 @@ async function updateChangelog({
   );
 }
 
+async function isAuthorizedRelease(): Promise<boolean> {
+  const { data: members } = await octokit.rest.teams.listMembersInOrg({
+    org: OWNER,
+    team_slug: TEAM_SLUG,
+  });
+
+  const { data: comments } = await octokit.rest.issues.listComments({
+    owner: OWNER,
+    repo: REPO,
+    issue_number: Number(process.env.EVENT_NUMBER),
+  });
+
+  return comments.some(
+    (comment) =>
+      comment.body?.toLowerCase().includes('approved') &&
+      members.find((member) => member.login === comment.user?.login)
+  );
+}
+
 async function processRelease(): Promise<void> {
   if (!process.env.GITHUB_TOKEN) {
     throw new Error('Environment variable `GITHUB_TOKEN` does not exist.');
@@ -158,16 +185,13 @@ async function processRelease(): Promise<void> {
     throw new Error('Environment variable `EVENT_NUMBER` does not exist.');
   }
 
-  const issueBody = getIssueBody();
-
-  if (
-    !getMarkdownSection(issueBody, TEXT.approvalHeader)
-      .split('\n')
-      .find((line) => line.startsWith(`- [x] ${TEXT.approved}`))
-  ) {
-    throw new Error('The issue was not approved.');
+  if (!(await isAuthorizedRelease())) {
+    throw new Error(
+      'The issue was not approved.\nA team member must leave a comment "approved" in the release issue.'
+    );
   }
 
+  const issueBody = await getIssueBody();
   const versionsToRelease = getVersionsToRelease(issueBody);
 
   await updateOpenApiTools(versionsToRelease);

scripts/release/text.ts

@@ -1,5 +1,3 @@
-const APPROVED = `Approved`;
-
 export default {
   header: `## Summary`,
 
@@ -33,10 +31,8 @@ export default {
   changelogDescription: `Update the following lines. Once merged, it will be reflected to \`changelogs/*.\``,
 
   approvalHeader: `## Approval`,
-  approved: APPROVED,
   approval: [
-    `To proceed this release, check the box below and close the issue.`,
-    `To skip this release, just close the issue.`,
-    `- [ ] ${APPROVED}`,
+    `To proceed this release, a team member must leave a comment "approved" in this issue.`,
+    `To skip this release, just close it.`,
   ].join('\n'),
 };