name: post release

on:
  release:
    types: published

permissions: {}

jobs:
  update-stable:
    runs-on: ubuntu-latest
    if: github.event.release.prerelease != 'true'
    permissions:
      contents: write # Needed to push to stable

    steps:
      - name: Checkout stable branch
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          ref: stable
          fetch-depth: 0
          persist-credentials: true # needed for `git push` below

      - name: Update stable branch to release tag & push
        run: |
          git reset --hard "${TAG_NAME}"
          git push
        env:
          TAG_NAME: ${{ github.event.release.tag_name }}

  new-changelog:
    runs-on: ubuntu-latest
    if: github.event.release.prerelease != 'true'
    permissions:
      contents: write # Needed to push to new branch
      pull-requests: write # Needed to create PR
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          ref: main
          fetch-tags: true
          persist-credentials: true # Needed for git-auto-commit-action

      - name: Set up Python
        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.14"
          pip-version: "25.3"

      - run: python scripts/release.py -a

      - uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
        with:
          commit_message: Add new changelog
          branch: ci/new-changelog
          create_branch: true

      - name: Create PR
        run: |
          gh pr create \
            -t "Add new changelog" -b "" \
            -l "ci: skip news" -l "C: maintenance" \
            -a $USER
        env:
          GITHUB_TOKEN: ${{ github.token }}
          USER: ${{ github.event.release.author.login }}