feat: automate rc draft release flow

.github/workflows/bump-version.yml

@@ -16,14 +16,21 @@ on:
         description: 'Custom version (only used when bump_type is "custom", e.g. 1.0.0-beta.1)'
         required: false
         type: string
+  push:
+    branches:
+      - 'rc/v*'
+    paths-ignore:
+      - 'package.json'
+      - 'src-tauri/Cargo.toml'
+      - 'src-tauri/Cargo.lock'
 
 permissions:
   contents: write
   actions: write
 
 concurrency:
   group: bump-version-${{ github.ref_name }}
-  cancel-in-progress: false
+  cancel-in-progress: true
 
 jobs:
   prepare:
@@ -32,6 +39,7 @@ jobs:
       current_version: ${{ steps.version.outputs.current }}
       new_version: ${{ steps.version.outputs.new }}
       is_prerelease: ${{ steps.version.outputs.is_prerelease }}
+      ref_name: ${{ steps.version.outputs.ref_name }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -47,28 +55,65 @@ jobs:
         id: version
         run: |
           CURRENT=$(node -p "require('./package.json').version")
+          CURRENT_CARGO=$(node - <<'NODE'
+          const fs = require("fs");
+          const cargo = fs.readFileSync("src-tauri/Cargo.toml", "utf8");
+          const match = cargo.match(/^version\s*=\s*"([^"]+)"/m);
+          if (!match) {
+            console.error("Failed to locate version field in src-tauri/Cargo.toml");
+            process.exit(1);
+          }
+          process.stdout.write(match[1]);
+          NODE
+          )
+
+          if [ "$CURRENT" != "$CURRENT_CARGO" ]; then
+            echo "::error::Version mismatch: package.json=$CURRENT, src-tauri/Cargo.toml=$CURRENT_CARGO"
+            exit 1
+          fi
+
           echo "current=$CURRENT" >> "$GITHUB_OUTPUT"
 
+          EVENT_NAME="${{ github.event_name }}"
+          if [ "$EVENT_NAME" = "create" ]; then
+            REF_NAME="${{ github.event.ref }}"
+          else
+            REF_NAME="${{ github.ref_name }}"
+          fi
+          echo "ref_name=$REF_NAME" >> "$GITHUB_OUTPUT"
+
           BUMP_TYPE="${{ inputs.bump_type }}"
           SEMVER_REGEX='^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-((0|[1-9][0-9]*|[0-9A-Za-z-][0-9A-Za-z-]*)(\.(0|[1-9][0-9]*|[0-9A-Za-z-][0-9A-Za-z-]*))*))?(\+([0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*))?$'
 
-          if [ "$BUMP_TYPE" = "custom" ]; then
-            NEW="${{ inputs.custom_version }}"
-            if [ -z "$NEW" ]; then
-              echo "::error::custom_version is required when bump_type is 'custom'"
-              exit 1
-            fi
-            if ! echo "$NEW" | grep -qE "$SEMVER_REGEX"; then
-              echo "::error::Invalid custom version: $NEW (must follow semver)"
-              exit 1
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            if [ "$BUMP_TYPE" = "custom" ]; then
+              NEW="${{ inputs.custom_version }}"
+              if [ -z "$NEW" ]; then
+                echo "::error::custom_version is required when bump_type is 'custom'"
+                exit 1
+              fi
+              if ! echo "$NEW" | grep -qE "$SEMVER_REGEX"; then
+                echo "::error::Invalid custom version: $NEW (must follow semver)"
+                exit 1
+              fi
+            else
+              BASE="${CURRENT%%[-+]*}"
+              IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE"
+              case "$BUMP_TYPE" in
+                major) NEW="$((MAJOR + 1)).0.0" ;;
+                minor) NEW="${MAJOR}.$((MINOR + 1)).0" ;;
+                patch) NEW="${MAJOR}.${MINOR}.$((PATCH + 1))" ;;
+              esac
             fi
           else
-            BASE="${CURRENT%%[-+]*}"
-            IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE"
-            case "$BUMP_TYPE" in
-              major) NEW="$((MAJOR + 1)).0.0" ;;
-              minor) NEW="${MAJOR}.$((MINOR + 1)).0" ;;
-              patch) NEW="${MAJOR}.${MINOR}.$((PATCH + 1))" ;;
+            case "$REF_NAME" in
+              rc/v*)
+                NEW="${REF_NAME#rc/v}"
+                ;;
+              *)
+                echo "::error::Branch $REF_NAME does not match rc/v<semver>"
+                exit 1
+                ;;
             esac
           fi
 
@@ -77,7 +122,65 @@ jobs:
             exit 1
           fi
 
-          if [ "$NEW" = "$CURRENT" ]; then
+          COMPARISON=$(
+            CURRENT_VERSION="$CURRENT" TARGET_VERSION="$NEW" node - <<'NODE'
+            function parse(version) {
+              const match = version.match(/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+([0-9A-Za-z.-]+))?$/);
+              if (!match) {
+                throw new Error(`Invalid semver: ${version}`);
+              }
+              return {
+                major: Number(match[1]),
+                minor: Number(match[2]),
+                patch: Number(match[3]),
+                prerelease: match[4] ? match[4].split(".") : []
+              };
+            }
+
+            function compareIdentifier(left, right) {
+              const leftNumeric = /^\d+$/.test(left);
+              const rightNumeric = /^\d+$/.test(right);
+              if (leftNumeric && rightNumeric) return Number(left) - Number(right);
+              if (leftNumeric) return -1;
+              if (rightNumeric) return 1;
+              return left.localeCompare(right);
+            }
+
+            function compare(left, right) {
+              for (const key of ["major", "minor", "patch"]) {
+                if (left[key] !== right[key]) {
+                  return left[key] - right[key];
+                }
+              }
+
+              if (!left.prerelease.length && !right.prerelease.length) return 0;
+              if (!left.prerelease.length) return 1;
+              if (!right.prerelease.length) return -1;
+
+              const len = Math.max(left.prerelease.length, right.prerelease.length);
+              for (let i = 0; i < len; i += 1) {
+                if (left.prerelease[i] === undefined) return -1;
+                if (right.prerelease[i] === undefined) return 1;
+                const diff = compareIdentifier(left.prerelease[i], right.prerelease[i]);
+                if (diff !== 0) return diff;
+              }
+
+              return 0;
+            }
+
+            const current = parse(process.env.CURRENT_VERSION);
+            const next = parse(process.env.TARGET_VERSION);
+            const diff = compare(next, current);
+            process.stdout.write(diff < 0 ? "lt" : diff > 0 ? "gt" : "eq");
+            NODE
+          )
+
+          if [ "$COMPARISON" = "lt" ]; then
+            echo "::error::New version $NEW would roll back current version $CURRENT"
+            exit 1
+          fi
+
+          if [ "$EVENT_NAME" = "workflow_dispatch" ] && [ "$COMPARISON" = "eq" ]; then
             echo "::error::New version equals current version ($CURRENT)"
             exit 1
           fi
@@ -94,12 +197,45 @@ jobs:
 
           echo "new=$NEW" >> "$GITHUB_OUTPUT"
 
-          if [[ "$NEW" == *-* ]]; then
-            echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
-            echo "### Tag type: prerelease" >> "$GITHUB_STEP_SUMMARY"
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            if [[ "$NEW" == *-* ]]; then
+              echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
+              echo "### Tag type: prerelease" >> "$GITHUB_STEP_SUMMARY"
+            else
+              echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+              echo "### Tag type: release" >> "$GITHUB_STEP_SUMMARY"
+            fi
           else
-            echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
-            echo "### Tag type: release" >> "$GITHUB_STEP_SUMMARY"
+            git fetch --no-tags origin main develop
+
+            MAIN_BASE=$(git merge-base HEAD origin/main || true)
+            DEVELOP_BASE=$(git merge-base HEAD origin/develop || true)
+
+            if [ -z "$MAIN_BASE" ] || [ -z "$DEVELOP_BASE" ]; then
+              echo "::error::Failed to resolve ancestry against origin/main and origin/develop"
+              exit 1
+            fi
+
+            if [ "$MAIN_BASE" = "$DEVELOP_BASE" ]; then
+              echo "::error::Could not distinguish whether $REF_NAME was created from main or develop"
+              exit 1
+            fi
+
+            if git merge-base --is-ancestor "$MAIN_BASE" "$DEVELOP_BASE"; then
+              SOURCE_BRANCH="develop"
+              echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
+              echo "### Tag type: prerelease" >> "$GITHUB_STEP_SUMMARY"
+            elif git merge-base --is-ancestor "$DEVELOP_BASE" "$MAIN_BASE"; then
+              SOURCE_BRANCH="main"
+              echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
+              echo "### Tag type: release" >> "$GITHUB_STEP_SUMMARY"
+            else
+              echo "::error::Ambiguous ancestry for $REF_NAME; unable to determine whether it came from main or develop"
+              exit 1
+            fi
+
+            echo "### Source branch: $SOURCE_BRANCH" >> "$GITHUB_STEP_SUMMARY"
+            echo "### Trigger mode: $EVENT_NAME" >> "$GITHUB_STEP_SUMMARY"
           fi
           echo "### Version bump: $CURRENT → $NEW" >> "$GITHUB_STEP_SUMMARY"
 
@@ -416,7 +552,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          ref: ${{ github.ref_name }}
+          ref: ${{ needs.prepare.outputs.ref_name }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -459,30 +595,38 @@ jobs:
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
           git add package.json src-tauri/Cargo.toml src-tauri/Cargo.lock
-          git diff --cached --quiet && { echo "No changes to commit"; exit 1; }
+          if git diff --cached --quiet; then
+            COMMIT_SHA=$(git rev-parse HEAD)
+            echo "No version changes to commit"
+            echo "commit_sha=$COMMIT_SHA" >> "$GITHUB_OUTPUT"
+            echo "committed=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
 
           git commit -m "chore: bump version to ${VERSION}"
           echo "Bumping to prerelease: $IS_PRERELEASE"
-          git push origin "HEAD:${GITHUB_REF_NAME}"
+          git push origin "HEAD:${{ needs.prepare.outputs.ref_name }}"
 
           COMMIT_SHA=$(git rev-parse HEAD)
           echo "commit_sha=$COMMIT_SHA" >> "$GITHUB_OUTPUT"
+          echo "committed=true" >> "$GITHUB_OUTPUT"
 
       - name: Trigger Release workflow (draft)
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           COMMIT_SHA: ${{ steps.commit_push.outputs.commit_sha }}
         run: |
           gh workflow run release.yml \
-            --ref "${GITHUB_REF_NAME}" \
+            --ref "${{ needs.prepare.outputs.ref_name }}" \
             -f version="${VERSION}" \
             -f target_commitish="${COMMIT_SHA}" \
             -f is_prerelease="${IS_PRERELEASE}"
 
       - name: Release trigger summary
         run: |
           echo "### Release draft trigger" >> "$GITHUB_STEP_SUMMARY"
-          echo "- Pushed branch commit: ${GITHUB_REF_NAME}@${{ steps.commit_push.outputs.commit_sha }}" >> "$GITHUB_STEP_SUMMARY"
+          echo "- Pushed branch commit: ${{ needs.prepare.outputs.ref_name }}@${{ steps.commit_push.outputs.commit_sha }}" >> "$GITHUB_STEP_SUMMARY"
+          echo "- Version commit created: ${{ steps.commit_push.outputs.committed }}" >> "$GITHUB_STEP_SUMMARY"
           echo "- Tag to be created on publish: v${VERSION}" >> "$GITHUB_STEP_SUMMARY"
           echo "- Prerelease: ${IS_PRERELEASE}" >> "$GITHUB_STEP_SUMMARY"
           echo "- Next: \`Release\` workflow is dispatched to create/update draft release (without pushing tag)." >> "$GITHUB_STEP_SUMMARY"