feat: add GitHub Actions release workflow to build and publish Debian packages

.github/workflows/release.yml

@@ -0,0 +1,138 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+'
+
+jobs:
+  create-release:
+    name: 🚀 Create GitHub Release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Create release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release view "${{ github.ref_name }}" \
+            || gh release create "${{ github.ref_name }}" \
+              --title "Release ${{ github.ref_name }}" \
+              --generate-notes
+
+  build-deb:
+    name: 📦 Build .deb - PG ${{ matrix.pg }}
+    needs: create-release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    strategy:
+      fail-fast: false
+      matrix:
+        pg: [14, 15, 16, 17, 18]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Add PostgreSQL APT repository
+        run: |
+          sudo apt-get install -y curl ca-certificates lsb-release
+          sudo install -d /usr/share/postgresql-common/pgdg
+          sudo curl -fsSL \
+            -o /usr/share/postgresql-common/pgdg/apt.postgresql.org.asc \
+            https://www.postgresql.org/media/keys/ACCC4CF8.asc
+          echo "deb [signed-by=/usr/share/postgresql-common/pgdg/apt.postgresql.org.asc] \
+            https://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" \
+            | sudo tee /etc/apt/sources.list.d/pgdg.list
+          sudo apt-get update
+
+      - name: Install PostgreSQL ${{ matrix.pg }} and dev headers
+        run: |
+          sudo apt-get install -y \
+            postgresql-${{ matrix.pg }} \
+            postgresql-server-dev-${{ matrix.pg }}
+
+      - name: Install Rust stable toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Cargo registry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry/index
+            ~/.cargo/registry/cache
+            ~/.cargo/git/db
+          key: ${{ runner.os }}-pg${{ matrix.pg }}-cargo-${{ hashFiles('Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-pg${{ matrix.pg }}-cargo-
+
+      - name: Install cargo-pgrx
+        # Version must match pgrx = "..." in Cargo.toml
+        run: cargo install cargo-pgrx --version =0.16.1 --locked
+
+      - name: Initialize pgrx for PG ${{ matrix.pg }}
+        run: |
+          cargo pgrx init \
+            --pg${{ matrix.pg }} /usr/lib/postgresql/${{ matrix.pg }}/bin/pg_config
+
+      - name: Build extension
+        run: cargo pgrx build --features pg${{ matrix.pg }} --release
+
+      - name: Package .deb
+        id: deb
+        run: |
+          set -euo pipefail
+          VERSION=$(perl -nE '/^version\s*=\s*"([^"]+)/ && do { say $1; exit }' Cargo.toml)
+          PGVER=${{ matrix.pg }}
+          PG_CONFIG="/usr/lib/postgresql/${PGVER}/bin/pg_config"
+          PKGLIBDIR=$(${PG_CONFIG} --pkglibdir)
+          SHAREDIR=$(${PG_CONFIG} --sharedir)
+          PKG_NAME="postgresql-${PGVER}-pg-no-seqscan"
+          DEB_ROOT="${GITHUB_WORKSPACE}/pkg/${PKG_NAME}"
+
+          mkdir -p "${DEB_ROOT}${PKGLIBDIR}"
+          mkdir -p "${DEB_ROOT}${SHAREDIR}/extension"
+          mkdir -p "${DEB_ROOT}/DEBIAN"
+
+          # Shared library compiled by pgrx
+          cp target/release/pg_no_seqscan.so "${DEB_ROOT}${PKGLIBDIR}/"
+
+          # Control file: substitute the @CARGO_VERSION@ placeholder
+          sed "s/@CARGO_VERSION@/${VERSION}/" pg_no_seqscan.control \
+            > "${DEB_ROOT}${SHAREDIR}/extension/pg_no_seqscan.control"
+
+          # SQL schema file generated by pgrx build
+          SQL_FILE=$(find . -maxdepth 2 -name "pg_no_seqscan--${VERSION}.sql" | head -1)
+          if [ -z "${SQL_FILE}" ]; then
+            echo "ERROR: SQL file pg_no_seqscan--${VERSION}.sql not found" >&2
+            exit 1
+          fi
+          cp "${SQL_FILE}" "${DEB_ROOT}${SHAREDIR}/extension/"
+
+          cat > "${DEB_ROOT}/DEBIAN/control" <<EOF
+          Package: ${PKG_NAME}
+          Version: ${VERSION}
+          Architecture: amd64
+          Depends: postgresql-${PGVER}
+          Maintainer: Doctolib <opensource@doctolib.com>
+          Description: Prevent sequential scans in PostgreSQL
+           pg_no_seqscan raises errors or warnings when sequential scans are
+           detected. Useful in development and CI environments.
+          EOF
+
+          DEB_FILE="${PKG_NAME}_${VERSION}_amd64.deb"
+          dpkg-deb --build "${DEB_ROOT}" "${DEB_FILE}"
+          echo "deb_file=${DEB_FILE}" >> "$GITHUB_OUTPUT"
+
+      - name: Upload .deb to GitHub Release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release upload "${{ github.ref_name }}" \
+            "${{ steps.deb.outputs.deb_file }}" \
+            --clobber