skills-release-prep.yml

name: Prepare skills release

on:
  workflow_dispatch:

permissions:
  contents: write

concurrency:
  group: skills-release-prep
  cancel-in-progress: false

jobs:
  prepare:
    name: Prepare skills release
    if: github.ref == 'refs/heads/main' && github.triggering_actor == 'longquanzheng'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - name: Assemble the skills fragments and push the release-prep branch
        run: |
          set -euo pipefail
          release_date="$(date -u +%F)"
          python3 script/release/changelog_fragments.py prepare skills --date "${release_date}"
          version="$(tr -d '[:space:]' < skills/VERSION)"
          # The run ID keeps the branch new when a later fragment needs another prep.
          branch="release-prep/skills-v${version}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}"
          git switch -c "${branch}"
          git config user.name 'github-actions[bot]'
          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
          git add -A skills changelog.d
          git commit -m "Skills: release ${version}"
          # GITHUB_TOKEN pull requests would not trigger Check Gate CI, so a person opens it.
          git push origin "${branch}"
          compare_url="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/compare/main...${branch}?expand=1"
          {
            echo "## Skills release ${version}"
            echo
            echo "Pushed \`${branch}\`. Open its pull request with the \`release-prep\` label: ${compare_url}"
            echo
            echo '```text'
            git show --stat --format='%s' HEAD
            echo '```'
          } >> "${GITHUB_STEP_SUMMARY}"

  reject-non-main:
    name: Reject non-main dispatch
    if: github.ref != 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - run: |
          echo "Skills releases are prepared only from main" >&2
          exit 1

  reject-non-owner:
    name: Reject non-owner dispatch
    if: github.triggering_actor != 'longquanzheng'
    runs-on: ubuntu-latest
    steps:
      - run: |
          echo "Skills releases need the owner's confirmation; only longquanzheng may dispatch this workflow" >&2
          exit 1