release.yml

name: Release

on:
  push:
    branches: [main]

concurrency: release-${{ github.ref }}

permissions:
  contents: write
  issues: write
  pull-requests: write
  id-token: write

jobs:
  checks:
    name: build · lint · typecheck · test
    uses: ./.github/workflows/reusable-checks.yml

  semantic-release:
    name: Semantic Release
    needs: [checks]
    runs-on: ubuntu-latest
    env:
      HUSKY: 0
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0
      - name: Configure git user
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
      - uses: ./.github/actions/install-deps
      - run: corepack pnpm build
      - name: Run semantic-release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: corepack pnpm release
      - name: Capture dirty tree diff on failure
        if: failure()
        run: git diff --patch --stat HEAD > /tmp/dirty-tree.patch
      - uses: actions/upload-artifact@v7
        if: failure()
        with:
          name: dirty-tree-diff-${{ github.run_id }}
          path: /tmp/dirty-tree.patch
          retention-days: 7