release.yml

# Publish amendable binaries to GitHub Releases when an x.y.z tag is pushed.
# Set Cargo.toml version, commit on master, then: git tag X.Y.Z && git push origin X.Y.Z
name: Release

permissions:
  contents: read

on:
  push:
    tags:
      - '[0-9]+.[0-9]+.[0-9]+'
      - '[0-9]+.[0-9]+.[0-9]+-*'
  pull_request:
    paths:
      - .github/workflows/release.yml

env:
  CARGO_INCREMENTAL: "0"
  CARGO_TERM_COLOR: always

jobs:
  create-release:
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - name: Check Cargo.toml version matches tag
        run: |
          set -euo pipefail
          tag="${GITHUB_REF_NAME}"
          cargo_version="$(awk -F '"' '/^\[package\]/{p=1} p&&/^version =/{print $2; exit}' Cargo.toml)"
          if [ "$tag" != "$cargo_version" ]; then
            echo "Tag ${tag} does not match Cargo.toml version ${cargo_version}" >&2
            exit 1
          fi
      - uses: taiki-e/create-gh-release-action@v1
        with:
          branch: master

  upload-assets:
    needs: create-release
    if: ${{ !cancelled() && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - target: x86_64-unknown-linux-musl
            os: ubuntu-latest
          - target: aarch64-unknown-linux-musl
            os: ubuntu-latest
          - target: aarch64-apple-darwin
            os: macos-latest
          - target: x86_64-apple-darwin
            os: macos-latest
          - target: x86_64-pc-windows-msvc
            os: windows-latest
    runs-on: ${{ matrix.os }}
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - uses: taiki-e/upload-rust-binary-action@v1
        with:
          bin: amendable
          target: ${{ matrix.target }}
          tar: unix
          zip: windows
          checksum: sha256
          include: LICENSE,README.md
          locked: true
          dry-run: ${{ github.event_name != 'push' }}
          dry-run-intended: ${{ github.event_name != 'push' }}