pre-release.yml

name: Pre-release

on:
  push:
    branches:
      - main

env:
  GO_VERSION: "1.24"

permissions:
  contents: write
  id-token: write
  attestations: write

jobs:
  pre-release:
    name: Pre-release
    runs-on: ubuntu-latest
    if: github.actor != 'dependabot[bot]'
    steps:
      - name: Checkout code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          fetch-depth: 0

      - name: Check for Go file changes
        id: go_changes
        run: |
          # Get the latest tag
          LATEST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")

          if [ -z "$LATEST_TAG" ]; then
            echo "No previous tags found, assuming Go files changed"
            echo "changed=true" >> $GITHUB_OUTPUT
          else
            # Check if any Go files changed since the last tag
            GO_CHANGES=$(git diff --name-only ${LATEST_TAG}..HEAD -- '*.go' 'go.mod' 'go.sum' | wc -l)

            if [ "$GO_CHANGES" -gt 0 ]; then
              echo "Go files changed since ${LATEST_TAG}"
              echo "changed=true" >> $GITHUB_OUTPUT
              git diff --name-only ${LATEST_TAG}..HEAD -- '*.go' 'go.mod' 'go.sum'
            else
              echo "No Go files changed since ${LATEST_TAG}"
              echo "changed=false" >> $GITHUB_OUTPUT
            fi
          fi

      - name: Set up Go
        if: steps.go_changes.outputs.changed == 'true'
        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
        with:
          go-version: ${{ env.GO_VERSION }}
          cache: true

      - name: Import GPG key
        if: steps.go_changes.outputs.changed == 'true'
        id: import_gpg
        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}

      - name: Generate snapshot version
        if: steps.go_changes.outputs.changed == 'true'
        id: version
        run: |
          # Get the latest release tag (exclude pre-release tags)
          LATEST_TAG=$(git tag -l 'v*' | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | sort -V | tail -n1 || echo "v0.0.0")
          if [ -z "$LATEST_TAG" ]; then
            LATEST_TAG="v0.0.0"
          fi
          echo "Latest release tag: ${LATEST_TAG}"

          # Remove 'v' prefix
          VERSION=${LATEST_TAG#v}
          echo "Version without prefix: ${VERSION}"

          # Parse version components
          IFS='.' read -r major minor patch <<< "$VERSION"
          echo "Version components: major=${major}, minor=${minor}, patch=${patch}"

          # Generate new version
          NEW_VERSION="${major}.${minor}.$((patch + 1))-dev.$(date +%Y%m%d%H%M%S)+$(git rev-parse --short HEAD)"
          echo "Pre-release version: ${NEW_VERSION}"
          echo "version=${NEW_VERSION}" >> $GITHUB_OUTPUT

      - name: Run GoReleaser (snapshot)
        if: steps.go_changes.outputs.changed == 'true'
        uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6
        with:
          version: latest
          args: release --snapshot --skip=sign --clean --skip=validate
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Generate pre-release attestations
        if: steps.go_changes.outputs.changed == 'true'
        uses: actions/attest-build-provenance@96b4a1ef7235a096b17240c259729fdd70c83d45 # v2
        with:
          subject-path: |
            dist/*.zip
            dist/*_checksums.txt

      - name: Upload artifacts
        if: steps.go_changes.outputs.changed == 'true'
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
        with:
          name: pre-release-artifacts
          path: dist/*

      - name: Create GitHub pre-release
        if: steps.go_changes.outputs.changed == 'true'
        uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2
        with:
          name: "Development Build v${{ steps.version.outputs.version }}"
          tag_name: "v${{ steps.version.outputs.version }}"
          prerelease: true
          draft: false
          files: |
            dist/*.zip
            dist/*_checksums.txt
          body: |
            ## Development Build

            This is an automated development build from commit ${{ github.sha }}.

            **⚠️ This is a pre-release version and should not be used in production.**

            ### Commit Information
            - SHA: ${{ github.sha }}
            - Author: ${{ github.actor }}
            - Message: ${{ github.event.head_commit.message }}

            ### Installation

            Download the appropriate archive for your platform and extract the provider binary.