release-auto-tag.yml

# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

name: Release Auto-Tag

on:
  workflow_dispatch: {}
  schedule:
    - cron: "0 14 * * 1-5" # 7 AM PDT, weekdays only

permissions:
  contents: write
  actions: write

concurrency:
  group: release-auto-tag
  cancel-in-progress: false

jobs:
  create-tag:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
        with:
          fetch-depth: 0

      - name: Determine next patch version
        id: version
        run: |
          latest=$(git tag -l 'v*.*.*' --sort=-v:refname | head -1)
          if [ -z "$latest" ]; then
            echo "::error::No existing v*.*.* tags found"
            exit 1
          fi
          echo "Latest tag: $latest"

          # Skip if no new commits since the latest tag
          commit_count=$(git rev-list "${latest}..HEAD" --count)
          echo "Commits since $latest: $commit_count"
          if [ "$commit_count" -eq 0 ]; then
            echo "No new commits since $latest — skipping tag creation"
            echo "skip=true" >> "$GITHUB_OUTPUT"
            exit 0
          fi

          major=$(echo "$latest" | sed 's/^v//' | cut -d. -f1)
          minor=$(echo "$latest" | sed 's/^v//' | cut -d. -f2)
          patch=$(echo "$latest" | sed 's/^v//' | cut -d. -f3)
          next="v${major}.${minor}.$((patch + 1))"

          if git tag -l "$next" | grep -q .; then
            echo "::error::Tag $next already exists"
            exit 1
          fi

          echo "next=$next" >> "$GITHUB_OUTPUT"
          echo "Next tag: $next"

      - name: Create and push tag
        if: steps.version.outputs.skip != 'true'
        run: |
          git tag ${{ steps.version.outputs.next }}
          git push origin ${{ steps.version.outputs.next }}

      - name: Trigger Release Tag workflow
        if: steps.version.outputs.skip != 'true'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh workflow run release-tag.yml \
            --ref main \
            -f tag=${{ steps.version.outputs.next }}