sure/.github/workflows/chart-release.yml

name: Chart Release

on:
  push:
    tags:
      - 'chart-v*'
  workflow_dispatch:

permissions:
  contents: write

jobs:
  prepare_release:
    runs-on: ubuntu-latest
    outputs:
      tag_name: ${{ steps.tag.outputs.tag_name }}
      chart_version: ${{ steps.tag.outputs.chart_version }}
      app_version: ${{ steps.tag.outputs.app_version }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Resolve chart release tag
        id: tag
        shell: bash
        run: |
          set -euo pipefail

          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
            BASE_STABLE_TAG="$(git tag --list 'v*' --sort=-v:refname | { grep -Ev 'alpha|beta|rc' || true; } | head -n 1)"
            if [ -z "$BASE_STABLE_TAG" ]; then
              echo "::error::No stable app tag found for chart appVersion"
              exit 1
            fi

            LATEST_CHART_TAG="$(git tag --list 'chart-v*' --sort=-v:refname | head -n 1)"
            if [ -n "$LATEST_CHART_TAG" ]; then
              BASE_CHART_VERSION="${LATEST_CHART_TAG#chart-v}"
            else
              BASE_CHART_VERSION="$(sed -n 's/^version: //p' charts/sure/Chart.yaml | head -n 1)"
              BASE_CHART_VERSION="${BASE_CHART_VERSION:-0.0.0}"
            fi
            MAJOR="$(echo "$BASE_CHART_VERSION" | cut -d. -f1)"
            MINOR="$(echo "$BASE_CHART_VERSION" | cut -d. -f2)"
            PATCH="$(echo "$BASE_CHART_VERSION" | cut -d. -f3 | sed 's/[^0-9].*$//')"
            PATCH="${PATCH:-0}"

            NEXT_PATCH=$((PATCH + 1))
            TAG_NAME="chart-v${MAJOR}.${MINOR}.${NEXT_PATCH}"
            while git rev-parse "refs/tags/${TAG_NAME}" >/dev/null 2>&1; do
              NEXT_PATCH=$((NEXT_PATCH + 1))
              TAG_NAME="chart-v${MAJOR}.${MINOR}.${NEXT_PATCH}"
            done
            CHART_VERSION="${MAJOR}.${MINOR}.${NEXT_PATCH}"

            git config user.name "${GITHUB_ACTOR}"
            git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
            if ! git tag "$TAG_NAME"; then
              echo "::error::Failed to create tag ${TAG_NAME}"
              exit 1
            fi
            if ! git push origin "$TAG_NAME"; then
              echo "::error::Failed to push tag ${TAG_NAME} to origin"
              exit 1
            fi
          else
            TAG_NAME="${GITHUB_REF_NAME}"
            BASE_STABLE_TAG="$(git tag --list 'v*' --sort=-v:refname | grep -Ev 'alpha|beta|rc' | head -n 1 || true)"
          fi

          CHART_VERSION="${TAG_NAME#chart-v}"

          if [ -z "${BASE_STABLE_TAG:-}" ]; then
            echo "::warning::No stable app tag found; falling back to CHART_VERSION (${CHART_VERSION}) for appVersion"
          fi

          APP_VERSION="${BASE_STABLE_TAG:-${CHART_VERSION}}"

          echo "tag_name=$TAG_NAME" >> "$GITHUB_OUTPUT"
          echo "chart_version=$CHART_VERSION" >> "$GITHUB_OUTPUT"
          echo "app_version=$APP_VERSION" >> "$GITHUB_OUTPUT"

  publish_chart:
    needs: prepare_release
    uses: ./.github/workflows/helm-publish.yml
    with:
      chart_version: ${{ needs.prepare_release.outputs.chart_version }}
      app_version: ${{ needs.prepare_release.outputs.app_version }}
      update_gh_pages: true
    secrets: inherit

  release:
    needs: [prepare_release, publish_chart]
    runs-on: ubuntu-latest
    steps:
      - name: Download Helm chart artifact
        uses: actions/download-artifact@v4
        with:
          name: helm-chart-package
          path: ${{ runner.temp }}/helm-artifacts

      - name: Create chart GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ needs.prepare_release.outputs.tag_name }}
          name: ${{ needs.prepare_release.outputs.tag_name }}
          generate_release_notes: true
          files: ${{ runner.temp }}/helm-artifacts/*.tgz