release.yml

name: release
on:
  push:
    tags:
      - "v*"
jobs:
  goreleaser:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
    steps:
      - name: Checkout
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version: "1.25"
      - name: Generate release notes from CHANGELOG.md
        id: notes
        run: |
          set -euo pipefail
          ver="${GITHUB_REF_NAME#v}"
          tag="${GITHUB_REF_NAME}"
          tmp=/tmp/RELEASE_NOTES.md
          section=$(sed -n "/^## \\[${ver}\\]/,/^## \\[/p" CHANGELOG.md || true)
          body=$(printf "%s\n" "$section" | sed '/^## \[/d' | tail -n +2)
          if [ -z "${body}" ]; then
            echo "No changelog section found for ${ver} in CHANGELOG.md" >&2
            exit 1
          fi
          {
            printf "## 🚀 Release %s\n\n" "$tag"
            printf "%s\n" "$body"
          } > "$tmp"
      - name: Import GPG key
        id: import_gpg
        uses: crazy-max/ghaction-import-gpg@v7
        with:
          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
          passphrase: ${{ secrets.GPG_PASSPHRASE }}
      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: latest
          args: release --clean --release-notes /tmp/RELEASE_NOTES.md
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
          SCOOP_GITHUB_TOKEN: ${{ secrets.SCOOP_GITHUB_TOKEN }}
          AUR_PRIVATE_KEY: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
          MASTODON_SERVER: ${{ secrets.MASTODON_SERVER }}
          MASTODON_CLIENT_ID: ${{ secrets.MASTODON_CLIENT_ID }}
          MASTODON_CLIENT_SECRET: ${{ secrets.MASTODON_CLIENT_SECRET }}
          MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }}
          BLUESKY_USERNAME: ${{ secrets.BLUESKY_USERNAME }}
          BLUESKY_APP_PASSWORD: ${{ secrets.BLUESKY_APP_PASSWORD }}

      - name: Post Release Announcements
        continue-on-error: true
        run: |
          ./scripts/post-release-announcement.sh \
            --tag "${GITHUB_REF_NAME}"
        env:
          MASTODON_SERVER: ${{ secrets.MASTODON_SERVER }}
          MASTODON_ACCESS_TOKEN: ${{ secrets.MASTODON_ACCESS_TOKEN }}
          BLUESKY_USERNAME: ${{ secrets.BLUESKY_USERNAME }}
          BLUESKY_APP_PASSWORD: ${{ secrets.BLUESKY_APP_PASSWORD }}
          ANNOUNCE_AI_ENABLED: ${{ vars.ANNOUNCE_AI_ENABLED }}
          ANNOUNCE_AI_BASE_URL: ${{ vars.ANNOUNCE_AI_BASE_URL }}
          ANNOUNCE_AI_MODEL: ${{ vars.ANNOUNCE_AI_MODEL }}
          ANNOUNCE_AI_TIMEOUT_SECONDS: ${{ vars.ANNOUNCE_AI_TIMEOUT_SECONDS }}
          ANNOUNCE_AI_DEBUG: ${{ vars.ANNOUNCE_AI_DEBUG }}
          ANNOUNCE_AI_API_KEY: ${{ secrets.ANNOUNCE_AI_API_KEY }}