release.yml

name: Release

on:
  push:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  release:
    name: Version, Publish, Tag & Release
    runs-on: ubuntu-latest
    timeout-minutes: 15
    permissions:
      contents: write
      pull-requests: write
      id-token: write

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Setup pnpm
        uses: pnpm/action-setup@v4

      - name: Setup Node.js
        uses: actions/setup-node@v5
        with:
          node-version: 24
          cache: pnpm
          registry-url: https://registry.npmjs.org

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build packages
        run: pnpm build

      - name: Create release PR or publish
        id: changesets
        uses: changesets/action@v1.9.0
        with:
          publish: pnpm changeset publish
          version: pnpm version:packages
          title: 'chore: version packages'
          commit: 'chore: version packages'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

      - name: Create tag and GitHub release
        if: steps.changesets.outputs.published == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          # Derive the release tag from the single published package version.
          VERSION=$(node -p "require('./packages/toolkit/package.json').version")
          TAG="v${VERSION}"

          if gh release view "$TAG" >/dev/null 2>&1; then
            echo "Tag $TAG already exists; skipping release creation"
          else
            echo "Creating GitHub release: $TAG"
            gh release create "$TAG" \
              --title "$TAG" \
              --generate-notes
          fi