Releases automatiques avec cocogitto

name: Release

on:
  push:
    branches: [master]

permissions:
  contents: write
  packages: write

jobs:
  release:
    runs-on: ubuntu-latest
    outputs:
      bumped: ${{ steps.bump.outputs.bumped }}
      tag_name: ${{ steps.bump.outputs.tag_name }}
    steps:
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0          # obligatoire : cog a besoin de tout l'historique
          token: ${{ secrets.GITHUB_TOKEN }}

      - uses: cocogitto/cocogitto-action@v4
        with:
          git-user: github-actions[bot]
          git-user-email: github-actions[bot]@users.noreply.github.com
          command: check
          args: --from-latest-tag   # ne valide que les commits depuis le dernier tag

      - name: Bump version
        id: bump
        run: |
          BEFORE=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
          cog bump --auto || true
          AFTER=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
          if [ "$BEFORE" != "$AFTER" ]; then
            git push
            git push origin "$AFTER"
            echo "bumped=true" >> "$GITHUB_OUTPUT"
            echo "tag_name=$AFTER" >> "$GITHUB_OUTPUT"
          else
            echo "bumped=false" >> "$GITHUB_OUTPUT"
          fi

      - name: Create GitHub release
        if: steps.bump.outputs.bumped == 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          TAG="${{ steps.bump.outputs.tag_name }}"
          NOTES=$(awk "/^## .*${TAG#v}/{found=1; next} found && /^- - -/{exit} found{print}" CHANGELOG.md)
          gh release create "$TAG" \
            --title "$TAG" \
            --notes "${NOTES:-Release $TAG}" \
            --verify-tag

  build-push:
    needs: release
    if: needs.release.outputs.bumped == 'true'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
        with:
          ref: ${{ needs.release.outputs.tag_name }}

      - uses: docker/setup-buildx-action@v4

      - uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - uses: docker/metadata-action@v6
        id: meta
        with:
          images: ghcr.io/${{ github.repository }}
          tags: |
            type=semver,pattern={{version}},value=${{ needs.release.outputs.tag_name }}
            type=semver,pattern={{major}}.{{minor}},value=${{ needs.release.outputs.tag_name }}
            type=raw,value=latest   # non généré automatiquement hors push de tag natif
            type=sha,prefix=sha-

      - uses: docker/build-push-action@v7
        with:
          push: true
          platforms: linux/amd64,linux/arm64
          cache-from: type=gha
          cache-to: type=gha,mode=max
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}