release.yml

name: Release

on:
  push:
    branches:
      - main
    paths:
      - '**'                        # Include all files
      - '!pkgs/website/**'          # Exclude website
      - '!pkgs/example-flows/**'    # Exclude example-flows
      - '!apps/demo/**'             # Exclude demo
      - '!**/*.md'                  # Exclude all markdown
      - '.changeset/*.md'           # Re-include changeset files
      - '!.changeset/README.md'     # Exclude changeset README
  workflow_dispatch:

concurrency: ${{ github.workflow }}-${{ github.ref }}

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest

    # required for JSR to be able to read the OIDC token and accept the publish request
    permissions:
      contents: write
      id-token: write # The OIDC ID token is used for authentication with JSR.
      pull-requests: write # Required for creating version PRs
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.PAT_TOKEN }}

      - uses: ./.github/actions/setup
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          atlas-cloud-token: ${{ secrets.ATLAS_CLOUD_TOKEN }}

      # npm 11.5.1+ required for OIDC trusted publishing
      - name: Update npm for OIDC support
        run: npm install -g npm@latest

      - name: Create Release Pull Request
        uses: changesets/action@v1
        with:
          version: pnpm run version
          publish: pnpm run release
        env:
          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}