name: Linear Release

on:
  push:
    branches:
      - main
      - "release/2.[0-9]+"

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  # Queue rather than cancel so back-to-back pushes to main don't cancel the first sync.
  cancel-in-progress: false

jobs:
  sync-main:
    name: Sync issues to next Linear release
    if: github.event_name == 'push' && github.ref_name == 'main'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Detect next release version
        id: version
        # Find the highest release/2.X branch (exact pattern, no suffixes
        # like release/2.31_hotfix) and derive the next minor version for
        # the release currently in development on main.
        run: |
          LATEST_MINOR=$(git branch -r | grep -E '^\s*origin/release/2\.[0-9]+$' | \
            sed 's/.*release\/2\.//' | sort -n | tail -1)
          if [ -z "$LATEST_MINOR" ]; then
            echo "No release branch found, skipping sync."
            echo "skip=true" >> "$GITHUB_OUTPUT"
            exit 0
          fi
          NEXT="2.$((LATEST_MINOR + 1))"
          echo "version=$NEXT" >> "$GITHUB_OUTPUT"
          echo "skip=false" >> "$GITHUB_OUTPUT"
          echo "Detected next release: $NEXT"

      - name: Sync issues
        id: sync
        if: steps.version.outputs.skip != 'true'
        uses: linear/linear-release-action@0353b5fa8c00326913966f00557d68f8f30b8b6b # v0.7.0
        with:
          access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
          command: sync
          version: ${{ steps.version.outputs.version }}
          name: ${{ steps.version.outputs.version }}
          timeout: 300

  sync-release-branch:
    name: Sync backports to Linear release
    if: github.event_name == 'push' && startsWith(github.ref_name, 'release/')
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Extract release version
        id: version
        # The trigger only allows exact release/2.X branch names.
        run: |
          echo "version=${GITHUB_REF_NAME#release/}" >> "$GITHUB_OUTPUT"

      - name: Sync issues
        id: sync
        uses: linear/linear-release-action@0353b5fa8c00326913966f00557d68f8f30b8b6b # v0.7.0
        with:
          access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
          command: sync
          version: ${{ steps.version.outputs.version }}
          name: ${{ steps.version.outputs.version }}
          timeout: 300

  code-freeze:
    name: Move Linear release to Code Freeze
    needs: sync-release-branch
    if: >
      github.event_name == 'push' &&
      startsWith(github.ref_name, 'release/') &&
      github.event.created == true
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Extract release version
        id: version
        run: |
          echo "version=${GITHUB_REF_NAME#release/}" >> "$GITHUB_OUTPUT"

      - name: Move to Code Freeze
        id: update
        uses: linear/linear-release-action@0353b5fa8c00326913966f00557d68f8f30b8b6b # v0.7.0
        with:
          access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
          command: update
          stage: Code Freeze
          version: ${{ steps.version.outputs.version }}
          timeout: 300