release.yml

name: Create Release
on:
  push:
    branches:
      - main
concurrency:
  group: "${{ github.workflow }}-${{ github.ref }}"
  cancel-in-progress: true
jobs:
  create_release:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          fetch-depth: 0
      - name: Generate changelog and determine version
        id: changelog
        uses: TriPSs/conventional-changelog-action@91be4f3188da74fe85de9caffcebc80b26d43b5b # v6
        with:
          github-token: ${{ secrets.GH_RELEASE_PAT }}
          skip-on-empty: true
          git-push: false
          skip-git-pull: true
          skip-version-file: true
          skip-commit: true
          skip-tag: true
          output-file: "false"
      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
        if: ${{ steps.changelog.outputs.skipped == 'false' }}
        with:
          python-version: "3.14"
      - name: Prepare artifact
        if: ${{ steps.changelog.outputs.skipped == 'false' }}
        run: |
          python3 .github/bin/update_image_tags.py "${{ steps.changelog.outputs.tag }}" --verbose
          echo "${{ steps.changelog.outputs.tag }}" > VERSION
          tar \
            --exclude='.github' \
            --exclude='.cursor' \
            --exclude='.git' \
            --exclude='.gitignore' \
            --exclude='.mkdocs.yaml' \
            --exclude='docs/requirements.txt' \
            --exclude='docs/images/**' \
            --exclude='docs/logo/**' \
            --exclude='Makefile' \
            --exclude='renovate.json' \
            -czf /tmp/release-${{ steps.changelog.outputs.tag }}.tar.gz .
      - name: Create GitHub Release
        uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1
        if: ${{ steps.changelog.outputs.skipped == 'false' }}
        with:
          tag: ${{ steps.changelog.outputs.tag }}
          name: Release ${{ steps.changelog.outputs.version }}
          body: ${{ steps.changelog.outputs.clean_changelog }}
          token: ${{ secrets.GH_RELEASE_PAT }}
          artifacts: "/tmp/release-${{ steps.changelog.outputs.tag }}.tar.gz"