release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      tag:
        description: "Tag to release (e.g. v0.1.0)"
        required: true
        type: string
  push:
    tags:
      - "v*.*.*"

permissions:
  contents: write
  id-token: write

jobs:
  release:
    runs-on: ubuntu-latest
    env:
      RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || github.ref_name }}
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          ref: ${{ env.RELEASE_TAG }}
      - name: Setup Biome
        uses: biomejs/setup-biome@v2
        with:
          # Infer from bun.lock
          version: ""
          working-dir: .
      - name: Setup Bun
        uses: oven-sh/setup-bun@v2
        with:
          bun-version: 1.3.14
      - name: Install dependencies
        run: bun install --frozen-lockfile --ignore-scripts
      - name: Lint and typecheck
        run: bun run check
      - name: Run tests
        run: bun test
      - name: Setup Node
        uses: actions/setup-node@v6
        with:
          node-version: 24.16.0
          registry-url: https://registry.npmjs.org
          package-manager-cache: false
      - name: Verify package version matches tag
        run: node -e "const fs=require('node:fs'); const pkg=JSON.parse(fs.readFileSync('package.json','utf8')); const tag=process.env.RELEASE_TAG.replace(/^v/,''); if(pkg.version!==tag){console.error(`package.json version ${pkg.version} != tag ${tag}`); process.exit(1)}"
      - name: Publish to npm
        run: npm publish --provenance --access public
      - name: Generate changelog
        id: git-cliff
        uses: orhun/git-cliff-action@v4
        with:
          config: git-cliff.toml
          args: -vv --current --strip header
        env:
          OUTPUT: CHANGELOG.md
          GITHUB_REPO: ${{ github.repository }}
      - name: Create GitHub release
        uses: softprops/action-gh-release@v3
        with:
          body: ${{ steps.git-cliff.outputs.content }}
          tag_name: ${{ env.RELEASE_TAG }}