Charon/.github/workflows/auto-versioning.yml

name: Auto Versioning and Release

# SEMANTIC VERSIONING RULES:
# - PATCH (0.14.1 → 0.14.2): fix:, perf:, refactor:, docs:, style:, test:, build:, ci:
# - MINOR (0.14.1 → 0.15.0): feat:, feat(...):
# - MAJOR (0.14.1 → 1.0.0): MANUAL ONLY - Create git tag manually when ready for 1.0.0
#
# ⚠️  Major version bumps are intentionally disabled in automation to prevent accidents.

on:
  workflow_run:
    workflows: ["Docker Build, Publish & Test"]
    types: [completed]
    branches: [ main ]

concurrency:
  group: ${{ github.workflow }}-${{ github.event.workflow_run.head_branch || github.ref }}
  cancel-in-progress: false  # Don't cancel in-progress releases

permissions:
  contents: write  # Required for creating releases via API (removed unused pull-requests: write)

jobs:
  version:
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.head_branch == 'main' }}
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          fetch-depth: 0
          ref: ${{ github.event.workflow_run.head_sha || github.sha }}

      - name: Calculate Semantic Version
        id: semver
        uses: paulhatch/semantic-version@9f72830310d5ed81233b641ee59253644cd8a8fc # v6.0.2
        with:
          # The prefix to use to create tags
          tag_prefix: "v"
          # Regex pattern for major version bump - DISABLED (manual only)
          # Use a pattern that will never match to prevent automated major bumps
          major_pattern: "/__MANUAL_MAJOR_BUMP_ONLY__/"
          # Regex pattern for minor version bump (new features)
          # Matches: "feat:" prefix in commit messages (Conventional Commits)
          minor_pattern: "/^feat(\\(.+\\))?:/"
          # Patch bumps: All other commits (fix:, chore:, etc.) are treated as patches by default
          # Pattern to determine formatting
          version_format: "${major}.${minor}.${patch}"
          # If no tags are found, this version is used
          version_from_branch: "0.0.0"
          # This helps it search through history to find the last tag
          search_commit_body: true
          # Important: This enables the output 'changed' which your other steps rely on
          enable_prerelease_mode: false

      - name: Show version
        run: |
          echo "Next version: ${{ steps.semver.outputs.version }}"
          echo "Version changed: ${{ steps.semver.outputs.changed }}"

      - name: Determine tag name
        id: determine_tag
        run: |
          # Normalize the version: remove any leading 'v' so we don't end up with 'vvX.Y.Z'
          RAW="${{ steps.semver.outputs.version }}"
          VERSION_NO_V="${RAW#v}"
          TAG="v${VERSION_NO_V}"
          echo "Determined tag: $TAG"
          echo "tag=$TAG" >> "$GITHUB_OUTPUT"

      - name: Check for existing GitHub Release
        id: check_release
        run: |
          TAG="${{ steps.determine_tag.outputs.tag }}"
          echo "Checking for release for tag: ${TAG}"
          STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
            -H "Authorization: token ${GITHUB_TOKEN}" \
            -H "Accept: application/vnd.github+json" \
            "https://api.github.com/repos/${GITHUB_REPOSITORY}/releases/tags/${TAG}") || true
          if [ "${STATUS}" = "200" ]; then
            echo "exists=true" >> "$GITHUB_OUTPUT"
            echo "ℹ️  Release already exists for tag: ${TAG}"
          else
            echo "exists=false" >> "$GITHUB_OUTPUT"
            echo "✅ No existing release found for tag: ${TAG}"
          fi
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Create GitHub Release (creates tag via API)
        if: ${{ steps.semver.outputs.changed == 'true' && steps.check_release.outputs.exists == 'false' }}
        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
        with:
          tag_name: ${{ steps.determine_tag.outputs.tag }}
          name: Release ${{ steps.determine_tag.outputs.tag }}
          generate_release_notes: true
          make_latest: true
          draft: false
          prerelease: false
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Output release information
        if: ${{ steps.semver.outputs.changed == 'true' && steps.check_release.outputs.exists == 'false' }}
        run: |
          echo "✅ Successfully created release: ${{ steps.determine_tag.outputs.tag }}"
          echo "📦 Release URL: https://github.com/${{ github.repository }}/releases/tag/${{ steps.determine_tag.outputs.tag }}"