docs: close TP-056 — Windows CI green on dev #16
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| tags: ["v*"] | |
| permissions: | |
| contents: write | |
| jobs: | |
| goreleaser: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.25" | |
| cache: true | |
| # Catch the easy mistake of pushing a tag without bumping VERSION. | |
| # docops update-check fetches VERSION via raw.githubusercontent.com, | |
| # so a mismatch silently breaks "is upgrade available" for everyone | |
| # who already has the previous release. Fail loud here instead. | |
| # | |
| # Prerelease tags (vX.Y.Z-beta.N etc.) intentionally do NOT touch the | |
| # VERSION file — that file tracks latest stable. Skip the check when | |
| # the tag has a SemVer prerelease component. See ADR-0032 / make beta. | |
| - name: Verify VERSION matches tag | |
| if: ${{ !contains(github.ref_name, '-') }} | |
| run: | | |
| tag_version="${GITHUB_REF#refs/tags/v}" | |
| file_version=$(tr -d '[:space:]' < VERSION) | |
| if [ "$tag_version" != "$file_version" ]; then | |
| echo "::error::tag $GITHUB_REF (=$tag_version) does not match VERSION file (=$file_version)" | |
| echo "::error::run 'make release VERSION=$tag_version' on main to do this correctly" | |
| exit 1 | |
| fi | |
| - uses: goreleaser/goreleaser-action@v7 | |
| with: | |
| distribution: goreleaser | |
| version: "~> v2" | |
| args: release --clean | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # Cross-repo tap/bucket pushes need a PAT with `Contents: read/write` | |
| # on logicwind/homebrew-tap + logicwind/scoop-bucket. Single secret, | |
| # aliased to both env var names goreleaser recognises. | |
| HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }} | |
| SCOOP_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }} |