release.yml

name: Release (Merge dev to main)

on:
  workflow_dispatch:
    inputs:
      dry_run:
        description: 'Dry run - validate only, do not merge'
        required: false
        type: boolean
        default: false

jobs:
  release:
    name: Merge dev to main
    runs-on: self-hosted
    concurrency:
      group: release
      cancel-in-progress: false
    permissions:
      contents: write
      pull-requests: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Fetch latest branches
        run: |
          git fetch origin main dev

      - name: Validate dev is ahead of main
        run: |
          COMMITS=$(git log origin/main..origin/dev --oneline)
          if [ -z "$COMMITS" ]; then
            echo "::error::Nothing to release — dev has no commits ahead of main"
            exit 1
          fi
          COMMIT_COUNT=$(echo "$COMMITS" | wc -l | tr -d ' ')
          echo "Found $COMMIT_COUNT commit(s) to release:"
          echo "$COMMITS"
          echo "COMMITS<<EOF" >> "$GITHUB_ENV"
          echo "$COMMITS" >> "$GITHUB_ENV"
          echo "EOF" >> "$GITHUB_ENV"
          echo "COMMIT_COUNT=$COMMIT_COUNT" >> "$GITHUB_ENV"

      - name: Write step summary (pre-merge)
        run: |
          echo "## 🚀 Release Summary" >> "$GITHUB_STEP_SUMMARY"
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "**Mode:** ${{ inputs.dry_run && 'Dry run (validation only)' || 'Live merge' }}" >> "$GITHUB_STEP_SUMMARY"
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "### Commits to be released (${{ env.COMMIT_COUNT }}):" >> "$GITHUB_STEP_SUMMARY"
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo '```' >> "$GITHUB_STEP_SUMMARY"
          echo "${{ env.COMMITS }}" >> "$GITHUB_STEP_SUMMARY"
          echo '```' >> "$GITHUB_STEP_SUMMARY"

      - name: Dry run - show diff summary
        if: ${{ inputs.dry_run }}
        run: |
          echo "=== DRY RUN MODE — No changes will be made ==="
          echo ""
          echo "Diff summary (dev vs main):"
          git diff --stat origin/main..origin/dev
          echo ""
          echo "=== Dry run complete. Re-run without dry_run to perform the actual release. ==="

      - name: Check for existing release PR
        if: ${{ !inputs.dry_run }}
        run: |
          EXISTING_PR=$(gh pr list --base main --head dev --json number --jq '.[0].number')
          if [ -n "$EXISTING_PR" ]; then
            echo "::error::An open PR from dev to main already exists (#$EXISTING_PR). Close or merge it first."
            exit 1
          fi
        env:
          GH_TOKEN: ${{ secrets.GHCR_PAT }}

      - name: Create release PR
        if: ${{ !inputs.dry_run }}
        run: |
          PR_URL=$(gh pr create --base main --head dev \
            --title "chore: release - merge dev into main" \
            --body "Automated release PR created by the release workflow.

          ### Commits (${{ env.COMMIT_COUNT }}):
          \`\`\`
          ${{ env.COMMITS }}
          \`\`\`")
          echo "Created PR: $PR_URL"
          PR_NUMBER=$(echo "$PR_URL" | grep -o '[0-9]*$')
          echo "PR_NUMBER=$PR_NUMBER" >> "$GITHUB_ENV"
          echo "PR_URL=$PR_URL" >> "$GITHUB_ENV"
        env:
          GH_TOKEN: ${{ secrets.GHCR_PAT }}

      - name: Enable auto-merge
        if: ${{ !inputs.dry_run }}
        run: |
          gh pr merge "$PR_NUMBER" --auto --merge
          echo "Auto-merge enabled on PR #$PR_NUMBER. It will merge once required checks pass."
        env:
          GH_TOKEN: ${{ secrets.GHCR_PAT }}

      - name: Write step summary (post-create)
        if: ${{ !inputs.dry_run }}
        run: |
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "### ✅ Release PR created!" >> "$GITHUB_STEP_SUMMARY"
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "PR [#${{ env.PR_NUMBER }}](${{ env.PR_URL }}) has been created with auto-merge enabled." >> "$GITHUB_STEP_SUMMARY"
          echo "It will merge into main automatically once required status checks pass." >> "$GITHUB_STEP_SUMMARY"

      - name: Write step summary (dry run complete)
        if: ${{ inputs.dry_run }}
        run: |
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "### ✅ Dry run complete — validation passed!" >> "$GITHUB_STEP_SUMMARY"
          echo "" >> "$GITHUB_STEP_SUMMARY"
          echo "Re-run this workflow with **dry_run = false** to perform the actual release." >> "$GITHUB_STEP_SUMMARY"