release.yml

name: Release

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:
    inputs:
      tag:
        description: Existing v* tag to publish
        required: true
        type: string

permissions:
  contents: write

concurrency:
  group: release-${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
  cancel-in-progress: false

jobs:
  release:
    name: Build release artifacts
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Resolve manual tag
        if: github.event_name == 'workflow_dispatch'
        env:
          RELEASE_TAG: ${{ inputs.tag }}
        run: git checkout --detach "$RELEASE_TAG"

      - name: Validate tag
        env:
          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
        run: |
          tag="$RELEASE_TAG"
          case "$tag" in
            v*) ;;
            *) echo "release tag must start with v: $tag" >&2; exit 1 ;;
          esac
          test "$(git rev-parse "$tag^{commit}")" = "$(git rev-parse HEAD)"

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: true

      - name: Run tests
        run: go test ./...

      - name: Run release automation tests
        run: python3 -m unittest scripts/release/test_generate_notes.py

      - name: Check diff whitespace
        run: git diff --check

      - name: Build artifacts
        run: ./scripts/release/build.sh

      - name: Verify linux binary version
        env:
          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
        run: |
          tag="$RELEASE_TAG"
          version="${tag#v}"
          test "$(./dist/gitcode-mcp_${tag}_linux_amd64/gitcode-mcp --version)" = "gitcode-mcp $version"

      - name: Generate release notes
        env:
          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
        run: |
          tag="$RELEASE_TAG"
          notes_path="dist/release-notes.md"
          asset_args=()
          supplement_args=()
          supplement_path=".github/release-notes/${tag}.md"
          if [ -f "$supplement_path" ]; then
            supplement_args+=(--supplement "$supplement_path")
          fi
          for asset in dist/*.tar.gz dist/*.zip dist/checksums.txt; do
            name="$(basename "$asset")"
            url="https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/${name}"
            asset_args+=(--asset "$name=$url")
          done

          python3 scripts/release/generate_notes.py \
            --tag "$tag" \
            --gitcode-web-base-url https://gitcode.com/urandon/gitcode-mcp \
            --output "$notes_path" \
            "${supplement_args[@]}" \
            "${asset_args[@]}"

          notes_sha="$(sha256sum "$notes_path" | awk '{print $1}')"
          {
            echo "### Release notes"
            echo
            echo "- Tag: \`$tag\`"
            echo "- Input: \`$notes_path\`"
            echo "- SHA-256: \`$notes_sha\`"
          } >> "$GITHUB_STEP_SUMMARY"

      - name: Publish GitHub release
        env:
          GH_TOKEN: ${{ github.token }}
          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
        run: |
          tag="$RELEASE_TAG"
          if gh release view "$tag" >/dev/null 2>&1; then
            gh release edit "$tag" \
              --title "gitcode-mcp $tag" \
              --notes-file dist/release-notes.md
            gh release upload "$tag" dist/*.tar.gz dist/*.zip dist/checksums.txt --clobber
          else
            gh release create "$tag" dist/*.tar.gz dist/*.zip dist/checksums.txt \
              --title "gitcode-mcp $tag" \
              --notes-file dist/release-notes.md \
              --verify-tag
          fi

      - name: Publish GitCode release
        env:
          GITCODE_TOKEN: ${{ secrets.GITCODE_TOKEN }}
          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
        run: |
          if [ -z "$GITCODE_TOKEN" ]; then
            echo "GITCODE_TOKEN is not configured; skipping GitCode release publish."
            exit 0
          fi

          tag="$RELEASE_TAG"
          cache_path="$RUNNER_TEMP/gitcode-mcp-cache.db"
          notes_path="dist/release-notes.md"
          repo="urandon/gitcode-mcp"

          go run ./cmd/gitcode-mcp repo add \
            --cache-path "$cache_path" \
            --repo "$repo" \
            --owner urandon \
            --name gitcode-mcp \
            --api-base-url https://api.gitcode.com \
            --scopes issues

          asset_args=()
          for asset in dist/*.tar.gz dist/*.zip dist/checksums.txt; do
            name="$(basename "$asset")"
            url="https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/${name}"
            asset_args+=(--asset "$name=$url")
          done

          go run ./cmd/gitcode-mcp publish-release \
            --cache-path "$cache_path" \
            --repo "$repo" \
            --tag "$tag" \
            --ref main \
            --title "gitcode-mcp $tag" \
            --input "$notes_path" \
            --status latest \
            --idempotency-key "release-$tag" \
            "${asset_args[@]}" \
            --format json