release.yml

name: Release

on:
  workflow_dispatch:
  schedule:
    # Every Monday at 8 AM EST (1 PM UTC). GitHub Actions runs in UTC;
    # adjust for DST if needed (EDT = UTC-4).
    - cron: '0 13 * * 1'

jobs:
  release:
    name: Semantic Release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      issues: write
      pull-requests: write
    outputs:
      released: ${{ steps.release.outputs.released }}
      version: ${{ steps.release.outputs.version }}
      tag: ${{ steps.release.outputs.tag }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Run Semantic Release
        id: release
        uses: python-semantic-release/python-semantic-release@v10.5.3
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          config_file: releaserc.toml
          verbosity: 1

  # Build and publish ghcr.io/chutch3/kenku:<version> + :latest, but only when a
  # new version was actually released.
  #
  # Recovery: every stage is idempotent. If Semantic Release fails before tagging,
  # re-run it — it cuts the release as if it were the first attempt (and no-ops if the
  # version already exists). If this build fails after the release was cut, "Re-run
  # failed jobs" keeps the release job's outputs and rebuilds; or dispatch build.yml
  # with the version (e.g. 0.15.0) to (re)build any existing tag at any time.
  build-image:
    name: Build & Publish Image
    needs: release
    if: needs.release.outputs.released == 'true'
    uses: ./.github/workflows/build.yml
    permissions:
      contents: read
      packages: write
    with:
      version: ${{ needs.release.outputs.version }}