cut-release.yml

name: Cut Release

on:
  schedule:
    # Every Monday at 06:00 UTC
    - cron: "0 6 * * 1"
  workflow_dispatch:
    inputs:
      bump:
        description: "Version bump level"
        required: true
        default: "patch"
        type: choice
        options:
          - patch
          - minor
          - major
      prerelease:
        description: "Create a release-candidate tag"
        required: false
        default: false
        type: boolean
      force:
        description: "Create a tag even without relevant changes"
        required: false
        default: false
        type: boolean

permissions:
  contents: write
  actions: write

jobs:
  cut:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Check for relevant changes since last stable tag
        id: changes
        run: |
          if [[ "${{ inputs.force }}" == "true" ]]; then
            echo "Force release requested; skipping change check."
            echo "skip=false" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          LATEST_TAG=$(git tag --list 'v[0-9]*.[0-9]*.[0-9]*' --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | head -n1 || true)
          if [[ -n "$LATEST_TAG" ]]; then
            CHANGED=$(git diff --name-only "$LATEST_TAG"..HEAD -- cmd/ internal/ api/ go.mod go.sum Dockerfile charts/)
            if [[ -z "$CHANGED" ]]; then
              echo "No relevant changes since $LATEST_TAG; skipping release."
              echo "skip=true" >> "$GITHUB_OUTPUT"
              exit 0
            fi
          fi

          echo "skip=false" >> "$GITHUB_OUTPUT"

      - name: Determine next tag
        id: version
        if: steps.changes.outputs.skip != 'true'
        run: |
          LATEST_TAG=$(git tag --list 'v[0-9]*.[0-9]*.[0-9]*' --sort=-v:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | head -n1 || true)
          if [[ -z "$LATEST_TAG" ]]; then
            LATEST_TAG="v0.0.0"
          fi

          MAJOR=$(echo "$LATEST_TAG" | sed 's/^v//' | cut -d. -f1)
          MINOR=$(echo "$LATEST_TAG" | sed 's/^v//' | cut -d. -f2)
          PATCH=$(echo "$LATEST_TAG" | sed 's/^v//' | cut -d. -f3)

          BUMP="${{ inputs.bump || 'patch' }}"
          case "$BUMP" in
            major) MAJOR=$((MAJOR + 1)); MINOR=0; PATCH=0 ;;
            minor) MINOR=$((MINOR + 1)); PATCH=0 ;;
            patch) PATCH=$((PATCH + 1)) ;;
          esac

          BASE_VERSION="v${MAJOR}.${MINOR}.${PATCH}"
          if [[ "${{ inputs.prerelease }}" == "true" ]]; then
            LATEST_RC=$(git tag --list "${BASE_VERSION}-rc.*" | sed "s/^${BASE_VERSION}-rc\.//" | sort -n | tail -n1 || true)
            NEXT_RC=$(( ${LATEST_RC:-0} + 1 ))
            VERSION="${BASE_VERSION}-rc.${NEXT_RC}"
          else
            VERSION="$BASE_VERSION"
          fi

          if git rev-parse -q --verify "refs/tags/$VERSION" >/dev/null; then
            echo "Tag $VERSION already exists." >&2
            exit 1
          fi

          echo "version=$VERSION" >> "$GITHUB_OUTPUT"

      - name: Create and push tag
        if: steps.changes.outputs.skip != 'true'
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git tag -a "$VERSION" -m "Release $VERSION"
          git push origin "$VERSION"

      - name: Run release workflow on tag
        if: steps.changes.outputs.skip != 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: gh workflow run release.yml --ref "${{ steps.version.outputs.version }}"