auto-tag.yml

name: Auto Tag
on:
  push:
    branches: [main]
    paths:
      - Cargo.toml
permissions:
  contents: write
jobs:
  tag:
    runs-on: ubuntu-latest
    steps:
      - name: Verify RELEASE_TOKEN is configured
        run: |
          if [ -z "${{ secrets.RELEASE_TOKEN }}" ]; then
            echo "::error::RELEASE_TOKEN secret is not configured. Tags pushed with the default GITHUB_TOKEN cannot trigger the Release workflow."
            exit 1
          fi
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.RELEASE_TOKEN }}
      - name: Check for version bump
        id: version
        run: |
          CURRENT=$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')
          if [ "${{ github.event.before }}" = "0000000000000000000000000000000000000000" ]; then
            PREVIOUS="$CURRENT"
          else
            PREVIOUS=$(git show ${{ github.event.before }}:Cargo.toml | grep '^version' | head -1 | sed 's/.*"\(.*\)"/\1/')
          fi
          echo "current=$CURRENT" >> "$GITHUB_OUTPUT"
          echo "previous=$PREVIOUS" >> "$GITHUB_OUTPUT"
          if [ "$CURRENT" != "$PREVIOUS" ]; then
            echo "changed=true" >> "$GITHUB_OUTPUT"
          else
            echo "changed=false" >> "$GITHUB_OUTPUT"
          fi
      - name: Create and push tag
        if: steps.version.outputs.changed == 'true'
        run: |
          VERSION="${{ steps.version.outputs.current }}"
          TAG="v${VERSION}"
          if git ls-remote --tags origin "refs/tags/$TAG" | grep -q .; then
            echo "Tag $TAG already exists on origin, skipping"
            exit 0
          fi
          if git rev-parse "$TAG" >/dev/null 2>&1; then
            echo "Tag $TAG already exists locally, skipping"
            exit 0
          fi
          git tag "$TAG"
          if ! git push origin "$TAG"; then
            if git ls-remote --tags origin "refs/tags/$TAG" | grep -q .; then
              echo "Tag $TAG was created concurrently on origin, skipping"
              exit 0
            fi
            echo "Failed to push tag $TAG"
            exit 1
          fi