name: Release
run-name: Release — determine version

on:
  push:
    branches: [main]

# Only one release at a time.
concurrency:
  group: release
  cancel-in-progress: false

permissions:
  contents: write
  issues: write
  pull-requests: write

jobs:
  semantic-release:
    name: Semantic Release
    runs-on: ubuntu-latest
    steps:
      # Use a PAT so that the tag push triggers the build workflow.
      # GITHUB_TOKEN events don't trigger other workflows (by design).
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.RELEASE_TOKEN }}

      - uses: actions/setup-node@v4
        with:
          node-version: 22

      - name: Install semantic-release and plugins
        run: >
          npm install --no-save
          semantic-release@24
          @semantic-release/changelog@6
          @semantic-release/git@10
          @semantic-release/github@11
          @semantic-release/commit-analyzer@13
          @semantic-release/release-notes-generator@14
          conventional-changelog-conventionalcommits@8

      - name: Run semantic-release
        env:
          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
        run: npx semantic-release