release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      increment:
        description: 'Version bump (leave empty for auto from conventional commits)'
        required: false
        type: choice
        default: ''
        options:
          - ''
          - patch
          - minor
          - major
      dry-run:
        description: 'Dry run (no publish, no push)'
        required: false
        type: boolean
        default: false

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
      pull-requests: write
      id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          fetch-depth: 0
          persist-credentials: true

      - name: Configure Git
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"

      - name: Enable Corepack
        run: corepack enable

      - name: Setup Node.js
        uses: actions/setup-node@v5
        with:
          node-version: '24'
          cache: 'yarn'
          registry-url: 'https://registry.npmjs.org'

      - name: Install dependencies (yarn)
        run: yarn install --immutable

      - name: Build lib
        run: yarn build

      - name: Release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
          NPM_CONFIG_PROVENANCE: true
        run: |
          yarn release --ci \
            ${{ inputs.increment && format('--increment={0}', inputs.increment) || '' }} \
            ${{ inputs.dry-run && '--dry-run' || '' }}