release.yml

name: Release

on:
  push:
    tags:
      - "v[0-9]+.[0-9]+.[0-9]+"
      - "v[0-9]+.[0-9]+.[0-9]+-*"

permissions:
  contents: write

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  sanity:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: actions/setup-node@v5
        with:
          node-version: 22
          cache: npm
      - run: npm ci

      - name: Verify tag matches package.json version
        run: |
          TAG_VERSION="${GITHUB_REF_NAME#v}"
          PKG_VERSION=$(node -e "console.log(require('./package.json').version)")
          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
            echo "::error::Tag version ($TAG_VERSION) does not match package.json ($PKG_VERSION)"
            exit 1
          fi

      - name: Verify package.json hygiene
        run: |
          node -e "
            const pkg = require('./package.json');
            const required = ['name', 'version', 'description', 'license', 'repository', 'engines'];
            const missing = required.filter(f => !pkg[f]);
            if (missing.length) { console.error('Missing:', missing.join(', ')); process.exit(1); }
          "

      - run: npm run lint
      - run: npm test

  release:
    needs: sanity
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
        with:
          fetch-depth: 0

      - name: Extract version
        id: version
        run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

      - name: Extract changelog
        run: |
          VERSION="${{ steps.version.outputs.version }}"
          awk "/^## \[${VERSION}\]/{found=1; next} /^## \[/{if(found) exit} found{print}" CHANGELOG.md > release-notes.txt
          if [ ! -s release-notes.txt ]; then echo "Release v${VERSION}" > release-notes.txt; fi

      - name: Create GitHub release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create "$GITHUB_REF_NAME" \
            --title "v${{ steps.version.outputs.version }}" \
            --notes-file release-notes.txt \
            --verify-tag