name: Release Decky

on:
  push:
    tags:
      - 'v*'

jobs:
  windows-release:
    # This label must match a trusted Windows Forgejo runner with Node, Rust,
    # Visual Studio C++ Build Tools, and WebView2/NSIS build prerequisites.
    runs-on: windows-latest
    steps:
      - name: Check out the tagged source
        uses: https://data.forgejo.org/actions/checkout@v6

      - name: Set up Node.js
        uses: https://data.forgejo.org/actions/setup-node@v4
        with:
          node-version: '22'
          cache: npm
          cache-dependency-path: app/package-lock.json

      - name: Set up Rust
        uses: https://github.com/dtolnay/rust-toolchain@stable

      - name: Build signed installer and updater metadata
        shell: pwsh
        working-directory: .
        env:
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
        run: |
          $version = '${{ forgejo.ref_name }}'.TrimStart('v')
          ./scripts/Prepare-Release.ps1 -Version $version -Notes "See the Forgejo release for changes in Decky $version."

      - name: Publish Forgejo release and stable update metadata
        shell: pwsh
        env:
          FORGEJO_TOKEN: ${{ forgejo.token }}
        run: |
          $version = '${{ forgejo.ref_name }}'.TrimStart('v')
          ./scripts/Publish-ForgejoRelease.ps1 -Version $version -Notes "Decky $version"