release.yml

name: Release

on:
    push:
        tags:
            - "v*.*.*"

jobs:
    release:
        runs-on: ubuntu-latest
        permissions:
            contents: write
        steps:
            - uses: actions/checkout@v4

            - name: Setup Node.js
              uses: actions/setup-node@v4
              with:
                  node-version: "20"
                  registry-url: "https://registry.npmjs.org"

            - name: Install dependencies
              run: make install

            - name: Build
              run: make build

            - name: Publish to npm
              # Publish directly here. The Makefile publish-rc/publish targets
              # are interactive (confirm prompt) and re-do the commit/tag/push —
              # correct for a human running the whole release locally, but they
              # hang/cancel in CI, which fires AFTER the tag already exists.
              run: |
                  if [[ "${GITHUB_REF_NAME}" == *-rc.* ]]; then
                    npm publish --tag rc --access public
                  elif [[ "${GITHUB_REF_NAME}" == *-beta.* ]]; then
                    npm publish --tag beta --access public
                  else
                    npm publish --access public
                  fi
              env:
                  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

            - name: Create GitHub Release
              run: |
                  gh release create "${{ github.ref_name }}" \
                    --title "${{ github.ref_name }}" \
                    --generate-notes
              env:
                  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}