release.yml

name: Publish Git package release

on:
  push:
    tags:
      - "v*"

permissions:
  contents: write

concurrency:
  group: release-${{ github.repository }}-${{ github.ref }}
  cancel-in-progress: false

jobs:
  release:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - name: Validate tag against package metadata
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail

          package_json="$({
            gh api \
              -H "Accept: application/vnd.github.raw+json" \
              "/repos/${GITHUB_REPOSITORY}/contents/package.json?ref=${GITHUB_SHA}"
          })"
          package_name="$(jq -er '.name' <<<"${package_json}")"
          package_version="$(jq -er '.version' <<<"${package_json}")"
          expected_tag="v${package_version}"

          semver_pattern='^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-((0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(\.(0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(\+([0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*))?$'
          if [[ ! "${package_version}" =~ ${semver_pattern} ]]; then
            echo "Package ${package_name} has invalid SemVer version ${package_version}." >&2
            exit 1
          fi

          if [[ "${GITHUB_REF_NAME}" != "${expected_tag}" ]]; then
            echo "Tag ${GITHUB_REF_NAME} does not match ${package_name} version ${package_version}." >&2
            exit 1
          fi

      - name: Create GitHub release
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          set -euo pipefail

          if gh release view "${GITHUB_REF_NAME}" --repo "${GITHUB_REPOSITORY}" >/dev/null 2>&1; then
            echo "Release ${GITHUB_REF_NAME} already exists."
            exit 0
          fi

          release_options=(
            --repo "${GITHUB_REPOSITORY}"
            --verify-tag
            --generate-notes
            --title "${GITHUB_REF_NAME}"
          )
          version_without_build="${GITHUB_REF_NAME%%+*}"
          if [[ "${version_without_build}" == *-* ]]; then
            release_options+=(--prerelease)
          fi

          gh release create "${GITHUB_REF_NAME}" "${release_options[@]}"