Merge branch 'trunk' into rsm-2698-build-php-with-xdebug

.github/workflows/build-php-cli-binaries.yml

@@ -458,3 +458,69 @@ jobs:
         with:
           name: php-${{ env.PHP_VERSION }}-cli-${{ matrix.target }}
           path: out/php-binaries/*
+
+  publish-apps-cdn:
+    name: Publish Apps CDN artifacts
+    needs: build
+    runs-on: ubuntu-latest
+    env:
+      PHP_VERSION: ${{ inputs.php_version }}
+      PHP_CLI_VISIBILITY: ${{ inputs.apps_cdn_visibility }}
+      DRY_RUN: ${{ inputs.upload_to_apps_cdn && 'false' || 'true' }}
+      WPCOM_API_TOKEN: ${{ secrets.WPCOM_API_TOKEN }}
+    steps:
+      - name: Checkout Studio
+        uses: actions/checkout@v6
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      - name: Download PHP CLI artifacts
+        uses: actions/download-artifact@v4
+        with:
+          pattern: php-${{ env.PHP_VERSION }}-cli-*
+          path: out/php-binaries
+          merge-multiple: true
+
+      - name: Publish PHP CLI artifacts to Apps CDN
+        run: |
+          set -euo pipefail
+
+          if [ "$DRY_RUN" != "true" ] && [ -z "${WPCOM_API_TOKEN:-}" ]; then
+            echo "WPCOM_API_TOKEN secret is required to upload PHP CLI artifacts to Apps CDN."
+            exit 1
+          fi
+
+          upload_results_file="${PWD}/out/php-binaries/apps-cdn-upload-results.json"
+
+          bundle exec fastlane publish_php_cli_binaries \
+            version:"${PHP_VERSION}" \
+            artifacts_dir:"${PWD}/out/php-binaries" \
+            visibility:"${PHP_CLI_VISIBILITY}" \
+            output_file:"${upload_results_file}"
+
+          echo "### Apps CDN PHP CLI upload" >> "$GITHUB_STEP_SUMMARY"
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          if [ "$DRY_RUN" = "true" ]; then
+            echo "Dry run completed for PHP ${PHP_VERSION} CLI artifacts with ${PHP_CLI_VISIBILITY} visibility." >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "Uploaded PHP ${PHP_VERSION} CLI artifacts with ${PHP_CLI_VISIBILITY} visibility." >> "$GITHUB_STEP_SUMMARY"
+          fi
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+
+          PHP_CLI_UPLOAD_RESULTS_FILE="$upload_results_file" ruby -rjson -e '
+            results = JSON.parse(File.read(ENV.fetch("PHP_CLI_UPLOAD_RESULTS_FILE")))
+
+            File.open(ENV.fetch("GITHUB_STEP_SUMMARY"), "a") do |summary|
+              summary.puts "| File | Apps CDN URL |"
+              summary.puts "| --- | --- |"
+
+              results.each do |file_name, result|
+                url = result["cdn_url"].to_s
+                url_output = url.empty? ? "Dry run (not uploaded)" : "<#{url}>"
+                summary.puts "| `#{file_name}` | #{url_output} |"
+              end
+            end
+          '