release.yml RawHistoryFolder

1name: release
2
3# After CI succeeds on main, create at most one tag for the unreleased
4# conventional commits. The tag is then built by the shared GoReleaser
5# workflow at its exact commit.
6on:
7  workflow_run:
8    workflows: [ci]
9    types: [completed]
10    branches: [main]
11
12permissions:
13  contents: write
14
15concurrency:
16  group: release
17  cancel-in-progress: false
18
19jobs:
20  tag:
21    if: >-
22      github.event.workflow_run.conclusion == 'success' &&
23      github.event.workflow_run.head_branch == 'main' &&
24      !contains(github.event.workflow_run.head_commit.message, '[release=skip]')
25    runs-on: ubuntu-latest
26    outputs:
27      tag: ${{ steps.version.outputs.tag }}
28    steps:
29      - name: Check out the verified commit
30        uses: actions/checkout@v4
31        with:
32          fetch-depth: 0
33          fetch-tags: true
34          ref: ${{ github.event.workflow_run.head_sha }}
35
36      - name: Compute the next release tag
37        id: version
38        shell: bash
39        run: |
40          set -euo pipefail
41          tag=$(bash .github/scripts/next-release-tag.sh)
42          if [ -z "$tag" ]; then
43            echo "No releasable conventional commits for this run."
44            exit 0
45          fi
46          echo "Releasing $tag from $(git rev-parse --short HEAD)"
47          echo "tag=$tag" >> "$GITHUB_OUTPUT"
48
49      - name: Create and push the tag
50        if: steps.version.outputs.tag != ''
51        env:
52          TAG: ${{ steps.version.outputs.tag }}
53        run: |
54          git config user.name "github-actions[bot]"
55          git config user.email "github-actions[bot]@users.noreply.github.com"
56          git tag -a "$TAG" -m "release $TAG"
57          git push origin "$TAG"
58
59  release:
60    needs: tag
61    if: needs.tag.outputs.tag != ''
62    permissions:
63      contents: write
64    uses: bnema/gh-actions/.github/workflows/go-release.yml@main
65    with:
66      go-version: "1.26"
67      # The reusable workflow fetches tags before this command, ensuring
68      # GoReleaser produces artifacts and notes for the newly created tag.
69      pre-command: git checkout --detach "${{ needs.tag.outputs.tag }}"