release.yml

name: Release

on:
  push:
    tags: ["v*.*.*"]

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: write

env:
  GO_VERSION: "1.25.x"

jobs:
  test:
    name: Pre-Release Test
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-go@v5
        with:
          go-version: ${{ env.GO_VERSION }}
          cache: true
          cache-dependency-path: go.sum

      - name: Verify modules
        run: go mod verify

      - name: Test
        run: go test -race -timeout 5m ./...

      - name: Validate tag version
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          TAG="${GITHUB_REF#refs/tags/}"
          if ! [[ "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$ ]]; then
            echo "❌ Invalid semver tag: $TAG"
            exit 1
          fi
          echo "✅ Valid tag: $TAG"

  release:
    name: Build & Release
    runs-on: ubuntu-latest
    needs: [test]
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - uses: actions/setup-go@v5
        with:
          go-version: ${{ env.GO_VERSION }}
          cache: true
          cache-dependency-path: go.sum

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v6
        with:
          distribution: goreleaser
          version: latest
          args: release --clean --timeout 60m
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Verify release assets
        run: |
          echo "🔍 Release assets:"
          ls -lh dist/*.tar.gz dist/*.zip 2>/dev/null || true
          echo ""
          echo "📋 Checksums:"
          cat dist/*_checksums.txt 2>/dev/null || echo "No checksums found"