release.yml

name: Build Precompiled NIFs

on:
  push:
    tags:
      - "*.*.*"
  workflow_dispatch:
    inputs:
      test_only:
        description: "Test run (skip publishing release)"
        required: false
        default: "false"
        type: choice
        options:
          - "false"
          - "true"

permissions:
  contents: write

jobs:
  build_release:
    name: NIF ${{ matrix.nif }} - ${{ matrix.job.target }} (${{ matrix.job.os }})
    runs-on: ${{ matrix.job.os }}
    strategy:
      fail-fast: false
      matrix:
        nif: ["2.15"]
        job:
          - { target: aarch64-apple-darwin, os: macos-15 }
          - { target: x86_64-apple-darwin, os: macos-15 }
          - {
              target: aarch64-unknown-linux-gnu,
              os: ubuntu-24.04,
              use-cross: true,
            }
          - {
              target: aarch64-unknown-linux-musl,
              os: ubuntu-24.04,
              use-cross: true,
            }
          - { target: x86_64-unknown-linux-gnu, os: ubuntu-24.04 }
          - {
              target: x86_64-unknown-linux-musl,
              os: ubuntu-24.04,
              use-cross: true,
            }

    steps:
      - name: Checkout code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Extract and validate project version
        shell: bash
        run: |
          # Extract version from mix.exs @version attribute
          VERSION=$(sed -n 's/^[[:space:]]*@version "\(.*\)"/\1/p' mix.exs | head -n1)
          if [ -z "$VERSION" ]; then
            echo "::error::Failed to extract version from mix.exs"
            exit 1
          fi

          # Check if this is a tag push or workflow_dispatch
          if [[ "$GITHUB_REF" == refs/tags/* ]]; then
            # Extract git tag from GITHUB_REF_NAME (e.g., "0.9.0" or "v0.9.0")
            GIT_TAG="${GITHUB_REF_NAME}"

            # Validate that git tag matches mix.exs version
            # Strip optional 'v' prefix for comparison
            TAG_VERSION="${GIT_TAG#v}"

            if [ "$VERSION" != "$TAG_VERSION" ]; then
              echo "::error::Version mismatch: mix.exs version is '$VERSION' but git tag is '$GIT_TAG'"
              exit 1
            fi

            echo "✓ Version validation passed: mix.exs version '$VERSION' matches tag '$GIT_TAG'"
          else
            # workflow_dispatch or other non-tag trigger
            echo "ℹ Using version from mix.exs: '$VERSION' (not a tag push)"
          fi

          echo "PROJECT_VERSION=$VERSION" >> $GITHUB_ENV

      - name: Install Rust toolchain
        run: |
          rustup update stable
          rustup default stable
          rustup target add ${{ matrix.job.target }}

      - name: Build the project
        id: build-crate
        uses: philss/rustler-precompiled-action@853ac56183f29a080304df3ff8a194b5bbdc24cc # v1.1.4
        with:
          project-name: ecto_libsql
          project-version: ${{ env.PROJECT_VERSION }}
          target: ${{ matrix.job.target }}
          nif-version: ${{ matrix.nif }}
          use-cross: ${{ matrix.job.use-cross && 'true' || '' }}
          project-dir: "."

      - name: Artifact upload
        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
        with:
          name: ${{ steps.build-crate.outputs.file-name }}
          path: ${{ steps.build-crate.outputs.file-path }}

      - name: Publish archives and packages
        if: startsWith(github.ref, 'refs/tags/') && inputs.test_only != 'true'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          RELEASE_FILE_PATH: ${{ steps.build-crate.outputs.file-path }}
        run: gh release upload "${GITHUB_REF_NAME}" "${RELEASE_FILE_PATH}" --clobber