name: Release

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      tag:
        description: "Existing tag to release"
        required: true
      target_branch:
        description: "Branch that the release tag was created from"
        required: true

permissions:
  actions: write
  contents: write
  packages: write

concurrency:
  group: release-${{ github.event.release.tag_name || inputs.tag }}
  cancel-in-progress: false

jobs:
  update-version:
    permissions:
      contents: write
    uses: ./.github/workflows/update-version-file-on-release.yml
    with:
      tag: ${{ github.event.release.tag_name || inputs.tag }}
      target_branch: ${{ github.event.release.target_commitish || inputs.target_branch }}
    secrets: inherit

  docker-image:
    needs: update-version
    permissions:
      contents: read
      packages: write
    uses: ./.github/workflows/publish-docker-image.yml
    with:
      tag: ${{ github.event.release.tag_name || inputs.tag }}
      checkout_sha: ${{ needs.update-version.outputs.updated_sha }}
      checkout_short_sha: ${{ needs.update-version.outputs.updated_short_sha }}
    secrets: inherit

  service-images:
    needs: update-version
    permissions:
      contents: read
      packages: write
    uses: ./.github/workflows/docker-build-and-release-services-images.yml
    with:
      tag: ${{ github.event.release.tag_name || inputs.tag }}
      checkout_sha: ${{ needs.update-version.outputs.updated_sha }}
      checkout_short_sha: ${{ needs.update-version.outputs.updated_short_sha }}
    secrets: inherit