release.yml

name: Release

on:
  workflow_dispatch:

permissions:
  contents: write

# Only one release run at a time — concurrent runs cause duplicate cog bump commits
concurrency:
  group: release
  cancel-in-progress: false

jobs:
  release:
    if: github.event_name == 'workflow_dispatch'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          fetch-tags: true
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Install Cocogitto
        uses: cocogitto/cocogitto-action@v4
        with:
          command: bump
          args: --auto
          git-user: 'github-actions[bot]'
          git-user-email: 'github-actions[bot]@users.noreply.github.com'

      - name: Resolve new tag
        id: tag
        run: echo "tag=$(git describe --tags --abbrev=0)" >> "$GITHUB_OUTPUT"

      - name: Check if release already exists
        id: release_check
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          if gh release view "${{ steps.tag.outputs.tag }}" >/dev/null 2>&1; then
            echo "exists=true" >> "$GITHUB_OUTPUT"
          else
            echo "exists=false" >> "$GITHUB_OUTPUT"
          fi

      - name: Generate changelog
        if: steps.release_check.outputs.exists == 'false'
        run: cog changelog --at "${{ steps.tag.outputs.tag }}" > RELEASE_NOTES.md

      - name: Push version commit and tag
        if: steps.release_check.outputs.exists == 'false'
        run: |
          TAG="${{ steps.tag.outputs.tag }}"
          git push origin HEAD:main
          # Push the tag explicitly; tolerate "already exists" from concurrent runs
          git push origin "refs/tags/${TAG}" || {
            git fetch --tags
            if git ls-remote --tags origin "refs/tags/${TAG}" | grep -q "${TAG}"; then
              echo "Tag ${TAG} already on remote — skipping tag push"
            else
              echo "Tag push failed for unknown reason" && exit 1
            fi
          }

      - name: Determine release parity
        id: parity
        run: |
          TAG="${{ steps.tag.outputs.tag }}"
          MINOR=$(echo "$TAG" | sed 's/^v[0-9]*\.\([0-9]*\)\..*/\1/')
          if [ $(( MINOR % 2 )) -eq 0 ]; then
            echo "is_stable=true" >> "$GITHUB_OUTPUT"
          else
            echo "is_stable=false" >> "$GITHUB_OUTPUT"
          fi

      - name: Create GitHub Release (stable even minor)
        if: steps.release_check.outputs.exists == 'false' && steps.parity.outputs.is_stable == 'true'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create "${{ steps.tag.outputs.tag }}" \
            --title "${{ steps.tag.outputs.tag }} (stable)" \
            --notes-file RELEASE_NOTES.md \
            --latest

      - name: Create GitHub Pre-release (dev odd minor)
        if: steps.release_check.outputs.exists == 'false' && steps.parity.outputs.is_stable == 'false'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create "${{ steps.tag.outputs.tag }}" \
            --title "${{ steps.tag.outputs.tag }} (dev/experimental)" \
            --notes-file RELEASE_NOTES.md \
            --prerelease