release.yaml

# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
---
name: Release

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Custom version (optional, e.g., 1.2.3)'
        required: false
        type: string

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  release:
    if: github.repository_owner == 'guacsec'
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Set up Java
        uses: actions/setup-java@v5
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: 'maven'

      - name: Set up Node.js
        uses: actions/setup-node@v5
        with:
          node-version: 24
          registry-url: 'https://registry.npmjs.org'

      - name: Set release version
        run: |
          if [ -n "${{ github.event.inputs.version }}" ]; then
            mvn -B versions:set -DnewVersion=${{ github.event.inputs.version }} -DgenerateBackupPoms=false
          else
            mvn -B versions:set -DremoveSnapshot -DgenerateBackupPoms=false
          fi
          mvn -B process-resources
          mvn -B validate

      - name: Get release version
        id: version
        run: |
          V=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
          echo "version=$V" >> $GITHUB_OUTPUT

      - name: Create release branch
        id: release_branch
        run: |
          BRANCH="release/v${{ steps.version.outputs.version }}"
          git config user.name "${{ github.actor }}"
          git config user.email "${{ github.actor }}@users.noreply.github.com"
          git checkout -b "$BRANCH"
          git add -A
          git commit -m "build(release): release version ${{ steps.version.outputs.version }}"
          echo "release_sha=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
          # Force-push so we overwrite any existing release branch (e.g. from a previous run)
          git push --force origin "$BRANCH"
          echo "$BRANCH" > releasebranch.txt

      - uses: actions/upload-artifact@v5
        with:
          name: releasebranch.txt
          path: releasebranch.txt

      - name: Create GitHub release tag
        uses: softprops/action-gh-release@v1
        with:
          name: "Release ${{ steps.version.outputs.version }}"
          tag_name: "v${{ steps.version.outputs.version }}"
          target_commitish: ${{ steps.release_branch.outputs.release_sha }}
          generate_release_notes: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Bump to next development version
        run: |
          mvn -B release:update-versions -DgenerateBackupPoms=false
          mvn -B process-resources
          git add -A
          git commit -m "build(release): bump to next development version"
          git push origin "release/v${{ steps.version.outputs.version }}"

      - name: Create Pull Request for release + next version
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PR_BODY: |
            This PR contains the following changes:

            1. Release version bump to ${{ steps.version.outputs.version }}.
            2. Filtered resources (docs, JS) updated to reflect the release version.
            3. Next development version bump after the release.
        run: |
          gh pr create \
            --title "build(release): release ${{ steps.version.outputs.version }} and bump to next development version" \
            --body "$PR_BODY" \
            --base main \
            --head "release/v${{ steps.version.outputs.version }}"