build: switch to new preview deploy github action (#26117)

Most of the action logic has been extracted for more reusability, so
that can also leverage this setup for AIO previews.

Author: devversion

.github/workflows/build-dev-app.yml

@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.0.0
       - uses: ./.github/actions/yarn-install
 
-      - uses: angular/dev-infra/github-actions/setup-bazel-remote-exec@a818bed04b1cf671f9af4f61331b12250da39a49
+      - uses: angular/dev-infra/github-actions/setup-bazel-remote-exec@eba7bac8f0c7afd20cf63d48de1942d06efd0972
         with:
           bazelrc: ./.bazelrc.user
 
@@ -34,17 +34,9 @@ jobs:
       # the number of concurrent actions is determined based on the host resources.
       - run: bazel build //src/dev-app:web_package --symlink_prefix=dist/ --jobs=32
 
-      # Prepare the workflow artifact that is available for the deploy workflow. We store the pull
-      # request number and SHA in a file that can be read by the deploy workflow. This is necessary
-      # so that the deploy workflow can create a comment on the PR that triggered the deploy.
-      - run: |
-          mkdir -p dist/devapp
-          cp -R dist/bin/src/dev-app/web_package/* dist/devapp
-          echo ${{github.event.pull_request.number}} > dist/devapp/pr_number
-          echo ${{github.event.pull_request.head.sha}} > dist/devapp/pr_sha
-
-      # Upload the generated dev-app archive.
-      - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # renovate: tag=v2.0.0
+      - uses: angular/dev-infra/github-actions/deploy-previews/pack-and-upload-artifact@eba7bac8f0c7afd20cf63d48de1942d06efd0972
         with:
-          name: devapp
-          path: dist/devapp
+          workflow-artifact-name: 'dev-app'
+          pull-number: '${{github.event.pull_request.number}}'
+          artifact-build-revision: '${{github.event.pull_request.head.sha}}'
+          deploy-directory: './dist/bin/src/dev-app/web_package/'

.github/workflows/deploy-dev-app.yml

@@ -22,35 +22,11 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
       - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2.0.0
-      - uses: ./.github/actions/yarn-install
-
-      - name: 'Download artifact from build job'
-        run: |
-          ./scripts/github/fetch-workflow-artifact.mjs ${{secrets.GITHUB_TOKEN}} \
-            ${{github.event.workflow_run.id}} devapp > devapp.zip
-
-      - name: Extracting workflow artifact into Firebase public directory.
-        run: |
-          mkdir -p dist/dev-app-web-pkg
-          unzip devapp.zip -d dist/dev-app-web-pkg
-
-      - name: Extracting pull request from extracted workflow artifact.
-        id: pr_info
-        run: |
-          echo "::set-output name=number::$(cat ./dist/dev-app-web-pkg/pr_number)"
-          echo "::set-output name=sha::$(cat ./dist/dev-app-web-pkg/pr_sha)"
-
-      - uses: FirebaseExtended/action-hosting-deploy@276388dd6c2cde23455b30293105cc866c22282d # renovate: tag=v0.0.0
-        id: deploy
-        with:
-          repoToken: '${{secrets.GITHUB_TOKEN}}'
-          firebaseServiceAccount: '${{secrets.FIREBASE_PREVIEW_SERVICE_TOKEN}}'
-          expires: 20d
-          projectId: ng-comp-dev
-          channelId: pr-${{steps.pr_info.outputs.number}}-${{steps.pr_info.outputs.sha}}
-
-      - uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443 # renovate: tag=v2.0.0
+      - uses: angular/dev-infra/github-actions/deploy-previews/upload-artifacts-to-firebase@eba7bac8f0c7afd20cf63d48de1942d06efd0972
         with:
-          message: |
-            Deployed dev-app to: ${{ steps.deploy.outputs.details_url }}
-          number: ${{ steps.pr_info.outputs.number }}
+          github-token: '${{secrets.GITHUB_TOKEN}}'
+          workflow-artifact-name: 'dev-app'
+          firebase-config-dir: './'
+          firebase-public-dir: './dist/dev-app-web-pkg'
+          firebase-project-id: 'ng-comp-dev'
+          firebase-service-key: '${{secrets.FIREBASE_PREVIEW_SERVICE_TOKEN}}'