🐙 github: Replace firebase-deployment action (#26)

Replace firebase-deployment action by hand-crafted make targets. This
has been motivated by an apparently broken firebase-tools release
(4 hours old) that cannot be down-graded when using the firebase GitHub
action and is a blocker. Aside: the foxygoat authors believe it is nice
to stay third-party GitHub action free where possible so that the bulk
of what's run on CI can also be run locally.

While at it upgrade the firebase CLI version to the second most recent
one - firebase-11.13.0 works, but the previous firebase-11.6.0 and the
even more recent firebase-11.14.0 do not it seems.

This merges the following commits:
* hermit: Upgrade firebase version
* github: Replace firebase-deployment action

     .github/workflows/cicd.yaml                     |  6 ++++++
     .github/workflows/firebase-hosting-merge.yml    | 17 -----------------
     .../workflows/firebase-hosting-pull-request.yml | 15 ---------------
     Makefile                                        |  5 +++--
     ...irebase-11.6.0.pkg => .firebase-11.13.0.pkg} |  0
     bin/firebase                                    |  2 +-
     6 files changed, 10 insertions(+), 35 deletions(-)

Pull-Request: #26

Author: juliaogris

.github/workflows/cicd.yaml

@@ -11,6 +11,9 @@ jobs:
     steps:
     - uses: actions/checkout@v2
     - run: ./bin/make ci
+    - run: ./bin/make firebase-deploy
+      env:
+        FIREBASE_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_EVY_LANG }}
 
   release:
     runs-on: ubuntu-latest
@@ -22,3 +25,6 @@ jobs:
     - run: ./bin/make release
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    - run: ./bin/make firebase-deploy-prod
+      env:
+        FIREBASE_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_EVY_LANG }}

.github/workflows/firebase-hosting-merge.yml

@@ -86,12 +86,13 @@ frontend-serve: frontend ## Build frontend and serve on free port
 
 # --- firebase -----------------------------------------------------------------
 CHANNEL ?= dev
+AUTH_CI = $(if $(CI), { printenv FIREBASE_SERVICE_ACCOUNT > out/gac.json; export GOOGLE_APPLICATION_CREDENTIALS=out/gac.json; };)
 
 firebase-deploy-prod: firebase-public ## Deploy to live channel on firebase, use with care!
-	firebase --config firebase/firebase.json deploy
+	$(AUTH_CI) firebase --config firebase/firebase.json deploy
 
 firebase-deploy: firebase-public ## Deploy to dev (or other) channel on firebase
-	firebase --config firebase/firebase.json hosting:channel:deploy $(CHANNEL)
+	$(AUTH_CI) firebase --config firebase/firebase.json hosting:channel:deploy $(CHANNEL)
 
 firebase-emulate: firebase-public ## Run firebase emulator for auth, hosting and datastore
 	firebase --config firebase/firebase.json emulators:start

.github/workflows/firebase-hosting-pull-request.yml

@@ -1 +1 @@
-.firebase-11.6.0.pkg
+.firebase-11.13.0.pkg