release.yml

name: Release

# Trigger: a push to main that touches RELEASE_NOTES.md.
# All release logic — parsing the top version, the (Unreleased) skip, the
# "tag already exists" skip, pack, publish, tag — lives in the FAKE target
# `releaseFromNotes` (build/ReleaseFromNotesTask.fs). This workflow is
# intentionally thin: any change to release behavior should go in the
# build project, not here. See AGENTS.md → "CI is a thin shell around FAKE".
on:
  push:
    branches: [main]
    paths:
      - RELEASE_NOTES.md

permissions:
  contents: write   # to push the version tag

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0   # full history + tags so the gate's tag-exists check works

      - name: Setup .NET
        uses: actions/setup-dotnet@v4
        with:
          global-json-file: global.json

      - name: Run releaseFromNotes
        env:
          CI: 'true'                                  # auto-accepts FAKE promptYesNo gates
          NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }} # consumed by ReleaseFromNotesTask
        run: |
          chmod u+x build.sh
          ./build.sh releaseFromNotes