release tags

Author: thehabes

.github/workflows/cd_prod.yaml

@@ -56,3 +56,75 @@ jobs:
           git pull
           npm install
           pm2 startOrReload ecosystem.config.json --env production
+  release:
+    needs: deploy
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout (full history + tags)
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+
+      - name: Derive next version and create the release
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Untrusted input — read from env, never inline into the script.
+          HEAD_COMMIT_MSG: ${{ github.event.head_commit.message }}
+        run: |
+          set -e
+
+          # Never release the same commit twice (idempotent re-runs).
+          EXISTING_TAG="$(git tag -l 'v*' --points-at HEAD | head -n1)"
+          if [ -n "$EXISTING_TAG" ]; then
+            echo "Commit already released as ${EXISTING_TAG} — nothing to do."
+            exit 0
+          fi
+
+          # Resolve the bump level from the commit message; default patch.
+          LEVEL="patch"
+          if printf '%s' "$HEAD_COMMIT_MSG" | grep -qiE 'BREAKING CHANGE|\[major\]|(^|[^a-z])[a-z]+(\([^)]*\))?!:'; then
+            LEVEL="major"
+          elif printf '%s' "$HEAD_COMMIT_MSG" | grep -qiE '\[minor\]|(^|[^a-z])feat(\([^)]*\))?:'; then
+            LEVEL="minor"
+          fi
+          echo "Bump level resolved from commit message: ${LEVEL}"
+
+          # Find the highest existing release tag (version-aware sort).
+          LATEST_TAG="$(git tag -l 'v*' --sort=-v:refname | head -n1)"
+
+          if [ -z "$LATEST_TAG" ]; then
+            # First release: seed from package.json (1.1.0 -> v1.1.0).
+            NEXT="$(node -p "require('./package.json').version")"
+            echo "No prior release tag — seeding first release from package.json: ${NEXT}"
+          else
+            # Bump the latest tag with npm's semver engine.
+            BASE="${LATEST_TAG#v}"
+            TMP="$(mktemp -d)"
+            printf '{"name":"x","version":"%s"}\n' "$BASE" > "$TMP/package.json"
+            ( cd "$TMP" && npm version "$LEVEL" --no-git-tag-version >/dev/null )
+            NEXT="$(node -p "require('${TMP}/package.json').version")"
+            rm -rf "$TMP"
+            echo "Latest release ${LATEST_TAG} -> next version ${NEXT}"
+          fi
+
+          TAG="v${NEXT}"
+
+          if gh release view "$TAG" >/dev/null 2>&1; then
+            echo "Release $TAG already exists — nothing to do."
+            exit 0
+          fi
+
+          gh release create "$TAG" \
+            --target "$GITHUB_SHA" \
+            --title "$TAG" \
+            --generate-notes \
+            --latest
+          echo "Published release $TAG"

package.json

@@ -1,7 +1,7 @@
 {
   "name": "rerum_server_nodejs",
   "type": "module",
-  "version": "0.0.0",
+  "version": "1.1.0",
   "private": true,
   "description": "Rerum API server for database access.",
   "keywords": [