release.yml

name: Release

on:
  pull_request:
    types: [closed]
    branches: [dev]

permissions: {}

jobs:
  release:
    if: github.head_ref == 'release' && github.event.pull_request.merged == true
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: Generate bot token
        id: generate-token
        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
        with:
          app-id: ${{ secrets.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}
          permission-contents: write

      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
          persist-credentials: true
          token: ${{ steps.generate-token.outputs.token }}

      - name: Setup app
        uses: ./.github/actions/setup
        with:
          install-command: ''

      - name: Create Release
        run: mise run knope -- release --verbose
        env:
          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}