# This workflow is managed by gh actions-lock.
# SPDX-License-Identifier: MPL-2.0
# This workflow is managed by gh actions-lock.
# This workflow is managed by gh actions-lock.
name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  actions: read
  contents: read

jobs:
  test:
    name: Test Before Release
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Checkout code
        uses: actions/checkout@v7.0.1

      - name: Setup Node.js
        uses: actions/setup-node@v7.1.0
        with:
          deno-version: v2.x
      - name: Build (ReScript -> JS)
        run: deno task build
      - name: Test
        run: deno task test

  publish-jsr:
    name: Publish to JSR
    runs-on: ubuntu-latest
    needs: test
    permissions:
      contents: read
      id-token: write   # JSR records build provenance from this
    steps:
      - name: Checkout code
        uses: actions/checkout@v7.0.1

      - name: Setup Node.js
        uses: actions/setup-node@v7.1.0
        with:
          deno-version: v2.x
      - name: Build (ReScript -> JS)
        run: deno task build
      - name: Publish to JSR
        run: deno publish

  github-release:
    name: Create GitHub Release
    runs-on: ubuntu-latest
    needs: publish-jsr
    permissions:
      contents: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v7.0.1
        with:
          fetch-depth: 0
      - name: Create GitHub Release
        uses: softprops/action-gh-release@v3.0.3
        with:
          generate_release_notes: true
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}