name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  contents: write
  security-events: write

jobs:
  build-and-test:
    uses: ./.github/workflows/ci.yml

  release:
    name: GoReleaser
    runs-on: ubuntu-latest
    needs: build-and-test
    
    steps:
      - name: Checkout
        uses: actions/checkout@v5
        with:
          fetch-depth: 0
          
      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.24'
          cache: true
          
      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v6
        with:
          version: '~> v2'
          args: release --clean
        env:
          GITHUB_TOKEN: ${{ secrets.GORELEASER_TOKEN }}