release.yml

name: Release

on:
  push:
    tags:
      - 'v*.*.*'

permissions:
  contents: write

jobs:
  verify:
    name: Verify Release
    runs-on: ubuntu-24.04
    timeout-minutes: 30

    steps:
      - name: Checkout code
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          fetch-depth: 0

      - name: Setup PHP
        uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
        with:
          php-version: '8.2'
          coverage: xdebug
          ini-values: display_errors=On, display_startup_errors=On, error_reporting=-1, zend.assertions=1, assert.exception=1

      - name: Setup global variables
        id: globals
        shell: bash
        run: |
          echo "COMPOSER_CACHE_DIR=$(composer config cache-dir)" >> $GITHUB_OUTPUT

      - name: Cache Composer dependencies
        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
        with:
          path: ${{ steps.globals.outputs.COMPOSER_CACHE_DIR }}
          key: composer-${{ hashFiles('**/composer.json') }}
          restore-keys: |
            composer-

      - name: Install dependencies
        run: composer update --ansi

      - name: Run tests
        run: composer test:unit

      - name: Run static analysis
        run: composer phpstan:check

  release:
    name: Create Release
    runs-on: ubuntu-24.04
    needs: verify
    if: startsWith(github.ref, 'refs/tags/v')

    steps:
      - name: Checkout code
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

      - name: Create release
        env:
          GH_TOKEN: ${{ secrets.RELEASE_ACTIONS_TOKEN }}
        run: |
          gh release create "${{ github.ref_name }}" \
            --title "${{ github.ref_name }}" \
            --draft \
            --generate-notes