release.yml RawHistoryFolder

1name: release
2
3on:
4  push:
5    tags: ['v*']
6
7# Default to no token permissions; release alone needs release writes.
8permissions: {}
9
10jobs:
11  release:
12    # Releases are published by ermite (git.bnema.dev); the GitHub mirror
13    # receives the tags but must not publish a second release or AUR push.
14    if: github.server_url != 'https://github.com'
15    runs-on: ubuntu-latest
16    permissions:
17      contents: write
18    steps:
19      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
20        with:
21          fetch-depth: 0
22          fetch-tags: true
23          persist-credentials: false
24      - name: Fetch tags
25        run: git fetch --force --tags
26      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c
27        with:
28          go-version-file: go.mod
29      - uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a
30        with:
31          distribution: goreleaser
32          version: '~> v2'
33          args: release --clean
34        env:
35          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
36          # SSH key for the vev-bin AUR push.
37          AUR_KEY: ${{ secrets.AUR_KEY }}