skyzen 0.4.3

A fast, ergonomic HTTP framework that works everywhere
name: Release

on:
  push:
    branches: [main]

jobs:
  release:
    name: Publish prepared releases
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: read
      id-token: write
      # The dispatch below creates a workflow_dispatch on binaries.yml; tag
      # pushes made under GITHUB_TOKEN do not cascade-trigger it on their own.
      actions: write
    concurrency:
      group: release-plz-release
      cancel-in-progress: false
    steps:
      - name: Checkout main
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      # Mint a short-lived crates.io token from the GitHub OIDC identity
      # instead of a stored CARGO_REGISTRY_TOKEN (trusted publishing is
      # configured per crate on crates.io).
      - uses: rust-lang/crates-io-auth-action@v1
        id: crates-io-auth
      - name: Publish releases
        uses: release-plz/action@v0.5
        id: release-plz
        with:
          command: release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          CARGO_REGISTRY_TOKEN: ${{ steps.crates-io-auth.outputs.token }}

      # A `skyzen-cli` release needs its cargo-dist binaries built on the tag
      # release-plz just pushed; GITHUB_TOKEN tag pushes do not trigger
      # binaries.yml, so dispatch it explicitly.
      - name: Dispatch binary builds
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASES: ${{ steps.release-plz.outputs.releases }}
        run: |
          echo "${RELEASES:-[]}" | jq -r '.[] | select(.package_name == "skyzen-cli") | .tag // ("skyzen-cli-v" + .version)' |
          while read -r tag; do
            gh workflow run binaries.yml -f "tag=$tag"
          done

  release-pr:
    name: Prepare release pull request
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    concurrency:
      group: release-plz-pr
      cancel-in-progress: false
    steps:
      - name: Checkout main
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Install Rust toolchain
        uses: dtolnay/rust-toolchain@stable

      - name: Prepare release pull request
        uses: release-plz/action@v0.5
        with:
          command: release-pr
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}