release.yml

name: Release

on:
  release:
    types: [created]

permissions:
  contents: write

jobs:
  quality-checks:
    name: Quality and Security Checks
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.27'
          cache: true

      - name: Run Tests
        run: |
          go test -v -race ./...
          ./test/late-podman-test.sh

      - name: Run Go Vet
        run: go vet ./...

      - name: Run golangci-lint
        uses: golangci/golangci-lint-action@v9
        with:
          version: v2.13.2

      - name: Run govulncheck
        uses: golang/govulncheck-action@v1
        with:
          go-version-input: '1.27'
          go-package: ./...

  build-and-release:
    needs: quality-checks
    runs-on: ubuntu-latest
    strategy:
      matrix:
        include:
          - os: linux
            arch: amd64
          - os: linux
            arch: arm64
          - os: darwin
            arch: amd64
          - os: darwin
            arch: arm64
          - os: windows
            arch: amd64
          - os: windows
            arch: arm64

    steps:
      - uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.27'

      - name: Build Binary
        env:
          GOOS: ${{ matrix.os }}
          GOARCH: ${{ matrix.arch }}
        run: |
          OUTPUT_NAME=late-${{ matrix.os }}-${{ matrix.arch }}
          if [ "${{ matrix.os }}" = "windows" ]; then
            OUTPUT_NAME="${OUTPUT_NAME}.exe"
          fi
          go build -ldflags "-X late/internal/common.Version=${{ github.ref_name }} -X late/internal/common.BuildNumber=${{ github.run_number }} -X late/internal/common.Commit=${{ github.sha }} -X 'late/internal/common.BuildDate=$(date -u +%Y-%m-%dT%H:%M:%SZ)'" -o $OUTPUT_NAME ./cmd/late

      - name: Upload Release Asset
        uses: softprops/action-gh-release@v2
        with:
          files: late-${{ matrix.os }}-${{ matrix.arch }}*

  update-homebrew:
    needs: build-and-release
    runs-on: ubuntu-latest
    steps:
      - name: Download release binaries
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          VERSION: ${{ github.ref_name }}
        run: |
          for target in darwin-arm64 darwin-amd64 linux-arm64 linux-amd64; do
            curl -sL -o "late-${target}" \
              "https://github.com/mlhher/late-cli/releases/download/${VERSION}/late-${target}"
          done

      - name: Compute SHA256 hashes
        id: hashes
        run: |
          echo "darwin_arm64=$(sha256sum late-darwin-arm64 | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
          echo "darwin_amd64=$(sha256sum late-darwin-amd64 | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
          echo "linux_arm64=$(sha256sum late-linux-arm64 | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"
          echo "linux_amd64=$(sha256sum late-linux-amd64 | cut -d' ' -f1)" >> "$GITHUB_OUTPUT"

      - name: Clone tap and update formula
        env:
          VERSION: ${{ github.ref_name }}
        run: |
          git clone https://x-access-token:${{ secrets.HOMEBREW_TAP_TOKEN }}@github.com/mlhher/homebrew-late.git tap
          cd tap
          CLEAN_VERSION="${VERSION#v}"
          # Replace version and sha256 values in-place (matches existing values, not placeholders)
          sed -i "s/version \".*\"/version \"${CLEAN_VERSION}\"/" Formula/late.rb
          # Each sha256 line is unique by context (order: darwin-arm64, darwin-amd64, linux-arm64, linux-amd64)
          python3 -c "
          import re, sys
          with open('Formula/late.rb') as f:
              content = f.read()
          hashes = {
              'darwin-arm64': '${{ steps.hashes.outputs.darwin_arm64 }}',
              'darwin-amd64': '${{ steps.hashes.outputs.darwin_amd64 }}',
              'linux-arm64':  '${{ steps.hashes.outputs.linux_arm64 }}',
              'linux-amd64':  '${{ steps.hashes.outputs.linux_amd64 }}',
          }
          for target, sha in hashes.items():
              content = re.sub(
                  r'(late-' + re.escape(target) + r'\")\s*\n\s*sha256 \"[a-f0-9]+\"',
                  r'\1\n      sha256 \"' + sha + '\"',
                  content
              )
          with open('Formula/late.rb', 'w') as f:
              f.write(content)
          "
          git config user.name "github-actions[bot]"
          git config user.email "github-actions[bot]@users.noreply.github.com"
          git add Formula/late.rb
          git diff --cached --quiet && echo "No changes to commit" && exit 0
          git commit -m "Update late to ${CLEAN_VERSION}"
          git push