release: promote main to stable

.github/workflows/create-release-pr.yml

@@ -0,0 +1,46 @@
+name: Create Release PR
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  create-release-pr:
+    name: Create Release PR
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v3
+        id: app-token
+        with:
+          app-id: ${{ secrets.DEVSY_GITHUB_APP_ID }}
+          private-key: ${{ secrets.DEVSY_GITHUB_APP_PRIVATE_KEY }}
+
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Get commit log
+        id: commits
+        run: |
+          COMMITS=$(git log origin/release..origin/main --oneline)
+          {
+            echo "log<<EOF"
+            echo "$COMMITS"
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Create PR
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          gh pr create \
+            --base release \
+            --head main \
+            --title "release: promote main to stable" \
+            --body "## Commits being promoted
+
+          ${{ steps.commits.outputs.log }}"

.github/workflows/desktop-ci.yml

@@ -74,7 +74,6 @@ jobs:
           cache: npm
           cache-dependency-path: desktop/package-lock.json
 
-      # ── Build Go CLI binary ──
       - name: Build CLI (unix)
         if: runner.os != 'Windows'
         run: |
@@ -97,13 +96,11 @@ jobs:
           $env:GOARCH = "amd64"
           go build -o desktop/resources/bin/devsy.exe .
 
-      # ── Windows native build tools ──
       - name: Configure Windows build tools
         if: runner.os == 'Windows'
         shell: pwsh
         run: echo "GYP_MSVS_VERSION=2022" >> $env:GITHUB_ENV
 
-      # ── Setup Python for native module builds ──
       - name: Setup Python
         uses: actions/setup-python@v6
         with:
@@ -112,17 +109,14 @@ jobs:
       - name: Install setuptools
         run: pip install setuptools
 
-      # ── Install Electron dependencies ──
       - name: Install dependencies
         working-directory: desktop
         run: npm ci
 
-      # ── Install xvfb on Linux for e2e tests ──
       - name: Install xvfb
         if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y xvfb
 
-      # ── E2E tests ──
       - name: Run e2e tests (Linux)
         if: runner.os == 'Linux'
         working-directory: desktop
@@ -137,7 +131,6 @@ jobs:
           npm run electron:build
           npx playwright test
 
-      # ── Package ──
       - name: Package with electron-builder
         working-directory: desktop
         run: npx electron-builder ${{ matrix.builder-args }} --config electron-builder.yml
@@ -150,7 +143,6 @@ jobs:
           # APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
           # APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
 
-      # ── Upload artifacts ──
       - name: Upload artifacts
         uses: actions/upload-artifact@v5
         with:

.github/workflows/semantic-release.yml

@@ -0,0 +1,45 @@
+name: Semantic Release
+
+on:
+  push:
+    branches: [main, release]
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: Run in dry-run mode (no release created)
+        type: boolean
+        default: false
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/create-github-app-token@v3
+        id: app-token
+        with:
+          app-id: ${{ secrets.DEVSY_GITHUB_APP_ID }}
+          private-key: ${{ secrets.DEVSY_GITHUB_APP_PRIVATE_KEY }}
+
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+
+      - run: npm ci
+
+      - name: Run semantic-release
+        run: npx semantic-release ${{ inputs.dry-run && '--dry-run' || '' }}
+        env:
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}

.gitignore

@@ -10,7 +10,6 @@
 # Unit test targets
 /main
 /profile.out
-/package-lock.json
 /tagsvendor/
 node_modules/
 desktop/dist/

.releaserc.json

@@ -0,0 +1,15 @@
+{
+  "tagFormat": "v${version}",
+  "branches": [
+    { "name": "main", "prerelease": "rc" },
+    { "name": "release", "prerelease": false }
+  ],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    [
+      "@semantic-release/github",
+      { "successComment": false, "failTitle": false }
+    ]
+  ]
+}