release.yml

name: Release

on:
  push:
    tags:
      - "*/v*"

permissions:
  contents: read

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  release:
    name: Release ${{ github.ref_name }}
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      contents: read
      id-token: write

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0

      - uses: ./.github/actions/setup

      - name: Parse tag
        id: parse-tag
        run: echo "package=${GITHUB_REF_NAME%%/*}" >> "$GITHUB_OUTPUT"

      - name: Build
        run: nadle build

      - name: Setup Node.js 24 for trusted publishing
        if: ${{ !startsWith(github.ref_name, 'vscode-extension/') }}
        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
        with:
          node-version: 24
          registry-url: https://registry.npmjs.org

      - name: Publish to npm
        if: ${{ !startsWith(github.ref_name, 'vscode-extension/') }}
        run: npm publish --provenance --access public
        working-directory: packages/${{ steps.parse-tag.outputs.package }}

      - name: Publish VS Code Extension
        if: startsWith(github.ref_name, 'vscode-extension/')
        env:
          VSCE_PAT: ${{ secrets.VSCE_PAT }}
        working-directory: packages/vscode-extension
        run: npx @vscode/vsce publish