release.yml

name: Release

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to release (e.g. 0.2.0)'
        required: true
  workflow_call:
    inputs:
      tag:
        description: 'Release tag to build and attach binaries to (e.g. v1.7.0)'
        required: true
        type: string

permissions:
  contents: write

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - goos: linux
            goarch: amd64
            suffix: linux-amd64
          - goos: linux
            goarch: arm64
            suffix: linux-arm64
          - goos: darwin
            goarch: amd64
            suffix: darwin-amd64
          - goos: darwin
            goarch: arm64
            suffix: darwin-arm64
          - goos: windows
            goarch: amd64
            suffix: windows-amd64.exe

    steps:
      - uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.22'

      - name: Build
        working-directory: go
        env:
          GOOS: ${{ matrix.goos }}
          GOARCH: ${{ matrix.goarch }}
          CGO_ENABLED: '0'
        # Public release binaries ship VKS only; vServer is excluded via the
        # vks_only build tag until it is ready to release.
        run: go build -tags vks_only -o grn-${{ matrix.suffix }} .

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          name: grn-${{ matrix.suffix }}
          path: go/grn-${{ matrix.suffix }}

  release:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Download all artifacts
        uses: actions/download-artifact@v4
        with:
          path: dist/
          merge-multiple: true

      - name: Attach binaries to the release
        env:
          GH_TOKEN: ${{ github.token }}
          # tag comes from the workflow_call input; otherwise the pushed tag ref.
          TAG: ${{ inputs.tag || github.ref_name }}
          REPO: ${{ github.repository }}
        run: |
          set -euo pipefail
          if gh release view "$TAG" --repo "$REPO" >/dev/null 2>&1; then
            # Release already exists (e.g. created by release-please) — attach binaries.
            gh release upload "$TAG" dist/grn-* --clobber --repo "$REPO"
          else
            # Manual tag push / dispatch — create the release with generated notes.
            gh release create "$TAG" dist/grn-* --generate-notes --repo "$REPO"
          fi