release.yml

name: Release

on:
  push:
    tags:
      - 'v*.*.*'

permissions:
  contents: write

jobs:
  # Run full CI checks before publishing so a bad tag can never ship a broken build.
  ci-gate:
    name: CI Gate (lint + tests)
    uses: ./.github/workflows/ci.yml

  release:
    name: Build & Release
    runs-on: ubuntu-latest
    needs: [ci-gate]
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

      - name: Set up Node.js
        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
        with:
          node-version: '24'
          cache: 'npm'

      - name: Set up PHP
        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0
        with:
          php-version: '8.2'
          extensions: openssl
          tools: composer, wp-cli
          coverage: none

      - name: Install Node dependencies
        run: npm ci

      - name: Install Composer dependencies
        run: composer install --prefer-dist --no-progress --no-dev --optimize-autoloader

      - name: Build release zip
        run: make release

      - name: Extract version from tag
        id: version
        run: echo "VERSION=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

      - name: Extract changelog section for this version
        id: changelog
        run: |
          VERSION="${{ steps.version.outputs.VERSION }}"
          # Extract the block between "## [x.y.z]" and the next "## [" heading.
          # awk prints from the first matching heading (exclusive) until the next heading.
          NOTES=$(awk "/^## \[${VERSION}\]/{found=1; next} found && /^## \[/{exit} found{print}" CHANGELOG.md)
          # Write to a temp file to avoid quoting nightmares with multiline strings.
          printf '%s' "$NOTES" > /tmp/release-notes.md

      - name: Create GitHub Release
        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
        with:
          name: Dispatch for Telex ${{ github.ref_name }}
          tag_name: ${{ github.ref_name }}
          body_path: /tmp/release-notes.md
          files: dispatch-for-telex-${{ steps.version.outputs.VERSION }}.zip
          fail_on_unmatched_files: true
          generate_release_notes: false