name: Release
on:
push:
tags:
- "v*"
jobs:
validate:
name: Validate version
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Verify VERSION matches Cargo.toml
run: python3 scripts/check_versions.py
- name: Verify tag matches VERSION
run: |
set -euo pipefail
TAG="${GITHUB_REF_NAME#v}"
VER=$(tr -d '[:space:]' < VERSION)
if [ "$TAG" != "$VER" ]; then
echo "::error::Git tag v$TAG must match VERSION ($VER)"
exit 1
fi
publish-crate:
name: Publish (crates.io)
needs: validate
runs-on: ubuntu-latest
environment: release
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Rust toolchain
uses: dtolnay/rust-toolchain@stable
- name: Publish to crates.io
env:
CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
run: cargo publish --locked
github_release:
name: GitHub Release
needs: publish-crate
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Create GitHub Release
uses: softprops/action-gh-release@v2
with:
tag_name: ${{ github.ref_name }}
name: ${{ github.ref_name }}
generate_release_notes: true