release: v0.14.0 #27

	name: release

	on:
	push:
	tags:
	- "v*"
	workflow_dispatch:
	inputs:
	tag:
	description: "Tag to (re)release (e.g. v0.1.0)"
	required: true
	type: string

	permissions:
	contents: write

	jobs:
	goreleaser:
	runs-on: macos-latest
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	fetch-depth: 0

	- name: Setup Go
	uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
	with:
	go-version-file: go.mod
	cache: true

	- name: Stash GoReleaser config
	run: cp .goreleaser.yaml /tmp/.goreleaser.yaml

	- name: Validate release tag
	if: ${{ github.event_name == 'workflow_dispatch' }}
	env:
	RELEASE_TAG: ${{ inputs.tag }}
	run: \|
	if ! echo "$RELEASE_TAG" \| grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$'; then
	echo "::error::Invalid tag format: $RELEASE_TAG"
	exit 1
	fi

	- name: Checkout release tag
	if: ${{ github.event_name == 'workflow_dispatch' }}
	env:
	RELEASE_TAG: ${{ inputs.tag }}
	run: git checkout "$RELEASE_TAG"

	- name: GoReleaser
	uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
	with:
	distribution: goreleaser
	version: latest
	args: release --clean --config /tmp/.goreleaser.yaml
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback