on_master.yaml

name: CI (master)

on:
  push:
    branches:
      - master
    tags-ignore:
      - "**" # Ignore all tags to avoid duplicate executions triggered by tag pushes.

permissions:
  contents: read

jobs:
  checks:
    name: Checks
    uses: ./.github/workflows/_checks.yaml
    with:
      # Skip the test suite for docs-only commits — they don't change runtime behavior.
      run_tests: ${{ !startsWith(github.event.head_commit.message, 'docs') }}
    secrets: inherit

  doc_release:
    # Skip this for non-"docs" commits.
    if: startsWith(github.event.head_commit.message, 'docs')
    name: Doc release
    needs: [checks]
    permissions:
      contents: write
      pages: write
      id-token: write
    uses: ./.github/workflows/manual_release_docs.yaml
    secrets: inherit

  # The beta release is dispatched as a separate workflow run (instead of calling `manual_release_beta.yaml` via `uses:`)
  # because PyPI's Trusted Publishing does not currently support reusable workflows.
  # See: https://docs.pypi.org/trusted-publishers/troubleshooting/#reusable-workflows-on-github
  beta_release:
    # Run this only for "feat", "fix", "perf", "refactor" and "style" commits.
    if: >-
      startsWith(github.event.head_commit.message, 'feat') ||
      startsWith(github.event.head_commit.message, 'fix') ||
      startsWith(github.event.head_commit.message, 'perf') ||
      startsWith(github.event.head_commit.message, 'refactor') ||
      startsWith(github.event.head_commit.message, 'style')
    name: Beta release
    needs: [checks]
    runs-on: ubuntu-latest
    permissions:
      actions: write # Required by execute-workflow.
    steps:
      - name: Dispatch beta release workflow
        uses: apify/actions/execute-workflow@v1.1.2
        with:
          workflow: manual_release_beta.yaml