# .github/workflows/release.yml
name: Release

on:
  push:
    tags:
      - 'v*'

# Default to read-only; the release job escalates to contents: write so
# GoReleaser can create the release and upload assets.
permissions:
  contents: read

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: true

env:
  # Track the latest 1.25.x patch (with check-latest below) so release binaries
  # pick up stdlib security fixes.
  GO_VERSION: '1.25'
  PROJECT_NAME: witr

jobs:
  release:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Checkout
        uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version: ${{ env.GO_VERSION }}
          check-latest: true

      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: latest
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GORELEASER_CURRENT_TAG: ${{ github.ref_name }}