Release automation improvements stolen from michaelklishin/frm

Author: michaelklishin

.github/workflows/release.yaml

@@ -0,0 +1,63 @@
+name: Release
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+    - 'v*.*.*'
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  contents: write
+
+jobs:
+  validate_version:
+    name: Validate Release Version
+    runs-on: ubuntu-24.04
+    steps:
+    - uses: actions/checkout@v6
+
+    - name: Install Nu Shell
+      uses: hustcer/setup-nu@v3
+      with:
+        version: '0.100'
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Validate NEXT_RELEASE_VERSION matches tag
+      run: nu ./scripts/validate-release-version.nu
+      env:
+        NEXT_RELEASE_VERSION: ${{ vars.NEXT_RELEASE_VERSION }}
+        GITHUB_REF_NAME: ${{ github.ref_name }}
+
+  create_gh_release:
+    name: Create GitHub Release
+    needs: [validate_version]
+    runs-on: ubuntu-24.04
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v6
+
+    - name: Install Nu Shell
+      uses: hustcer/setup-nu@v3
+      with:
+        version: '0.100'
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Extract changelog for release
+      run: nu ./scripts/extract-changelog.nu
+      env:
+        VERSION: ${{ vars.NEXT_RELEASE_VERSION }}
+
+    - name: Publish GitHub release
+      uses: softprops/action-gh-release@v2
+      with:
+        tag_name: v${{ vars.NEXT_RELEASE_VERSION }}
+        draft: false
+        body_path: release_notes.md
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

scripts/extract-changelog.nu

@@ -0,0 +1,24 @@
+#!/usr/bin/env nu
+
+let version = $env.VERSION? | default ""
+if $version == "" {
+    print "ERROR: VERSION environment variable is not set"
+    exit 1
+}
+
+let header = $'## v($version)'
+
+let lines = open CHANGELOG.md | lines
+let start_idx = $lines | enumerate | where { |it| $it.item | str starts-with $header } | get -i 0.index
+
+if $start_idx == null {
+    print $"ERROR: Version header '($header)' not found in CHANGELOG.md"
+    exit 1
+}
+
+let remaining = $lines | skip ($start_idx + 1)
+let end_offset = $remaining | enumerate | where { |it| $it.item | str starts-with '## v' } | get -i 0.index | default ($remaining | length)
+
+let section = $lines | skip $start_idx | take ($end_offset + 1)
+
+$section | str join "\n" | save --force release_notes.md

scripts/validate-release-version.nu

@@ -0,0 +1,40 @@
+#!/usr/bin/env nu
+
+# Validates that NEXT_RELEASE_VERSION matches the git tag
+
+let expected = $env.NEXT_RELEASE_VERSION? | default ""
+let tag = $env.GITHUB_REF_NAME? | default ""
+
+if $expected == "" {
+    print "ERROR: NEXT_RELEASE_VERSION variable is not set"
+    print ""
+    print "Set it at: Settings > Secrets and variables > Actions > Variables"
+    exit 1
+}
+
+if $tag == "" {
+    print "ERROR: GITHUB_REF_NAME is not available"
+    exit 1
+}
+
+# Check if this looks like a version tag
+if not ($tag | str starts-with 'v') {
+    print $"ERROR: This workflow should be triggered by a version tag \(v*.*.*\), not '($tag)'"
+    print ""
+    print "Push a tag like: git tag v($expected) && git push origin v($expected)"
+    exit 1
+}
+
+# Extract version from tag (v0.14.0 -> 0.14.0)
+let tag_version = $tag | str substring 1..
+
+if $expected == $tag_version {
+    print $"Version validated: ($expected) matches tag ($tag)"
+} else {
+    print $"ERROR: NEXT_RELEASE_VERSION \(($expected)\) does not match tag \(($tag)\)"
+    print ""
+    print "Either:"
+    print $"  1. Update NEXT_RELEASE_VERSION to '($tag_version)' at: Settings > Secrets and variables > Actions > Variables"
+    print $"  2. Or push the correct tag: git tag v($expected) && git push origin v($expected)"
+    exit 1
+}