name: Update Release Labels

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      release_version:
        description: "Target release version (e.g., 3.1.4)"
        required: true
        type: string

defaults:
  run:
    shell: bash

permissions: {}

jobs:
  update-labels:
    if: >-
      (github.event_name == 'release' && !github.event.release.prerelease) ||
      (github.event_name == 'workflow_dispatch' && !contains(github.event.inputs.release_version, 'rc'))
    runs-on: ubuntu-slim
    timeout-minutes: 10
    permissions:
      contents: read
      issues: write
      pull-requests: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
          sparse-checkout: |
            .github/workflows/update-release-labels.js
          sparse-checkout-cone-mode: false

      - name: Update release labels
        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          retries: 3
          script: |
            const { updateReleaseLabels } = require('.github/workflows/update-release-labels.js');
            await updateReleaseLabels({ github, context });