release.yml

name: Release Build

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version tag (e.g. v1.0.0)'
        required: true
        type: string

permissions:
  contents: write
  id-token: write
  attestations: write

jobs:
  release:
    uses: ./.github/workflows/build-publish.yml
    with:
      version: ${{ inputs.version }}
    secrets: inherit

  # First submission to microsoft/winget-pkgs must be manual; this job automates
  # subsequent version bumps once the package exists upstream and WINGET_TOKEN
  # (classic PAT, public_repo scope) is configured. Skips silently otherwise.
  winget:
    needs: release
    runs-on: ubuntu-latest
    env:
      WINGET_PAT: ${{ secrets.WINGET_TOKEN }}
    steps:
      - name: Submit winget version bump
        if: env.WINGET_PAT != ''
        uses: vedantmgoyal9/winget-releaser@v2
        with:
          identifier: SysAdminDoc.REDplusplus
          release-tag: ${{ inputs.version }}
          token: ${{ secrets.WINGET_TOKEN }}