feat(ci): auto-release on every push to main

CI now bumps patch version, commits, tags, and triggers the release
workflow automatically. No manual version bumping needed.

Author: kaizen403

.github/workflows/ci.yml

@@ -48,3 +48,46 @@ jobs:
 
       - name: Build npm package
         run: pnpm --filter ./packages/openlinear build
+
+  auto-release:
+    name: Auto Release
+    needs: release-readiness
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main' && !startsWith(github.event.head_commit.message, 'release:')
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Bump version, commit, tag, and push
+        run: |
+          set -euo pipefail
+          bash ./scripts/bump-version.sh
+          NEXT=$(node -p "require('./packages/openlinear/package.json').version")
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "release: v${NEXT}"
+          git tag "v${NEXT}"
+          git push origin main --tags
+
+      - name: Trigger release workflow
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh workflow run release.yml -f tag="v$(node -p "require('./packages/openlinear/package.json').version")"

.github/workflows/release.yml

@@ -4,16 +4,22 @@ on:
   push:
     tags:
       - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Release tag (e.g. v0.1.44)"
+        required: true
 
 permissions:
   contents: write
 
 concurrency:
-  group: release-${{ github.ref_name }}
+  group: release-${{ inputs.tag || github.ref_name }}
   cancel-in-progress: false
 
 env:
   TURBO_TELEMETRY_DISABLED: 1
+  RELEASE_TAG: ${{ inputs.tag || github.ref_name }}
 
 jobs:
   build-release:
@@ -39,6 +45,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: ${{ env.RELEASE_TAG }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -73,7 +81,7 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Verify release version metadata
-        run: bash ./scripts/sync-aur-metadata.sh "${GITHUB_REF_NAME#v}"
+        run: bash ./scripts/sync-aur-metadata.sh "${RELEASE_TAG#v}"
 
       - name: Build sidecar artifacts
         run: bash ./scripts/build-sidecar.sh
@@ -97,7 +105,7 @@ jobs:
           TMP_DIR=$(mktemp -d)
           trap 'rm -rf "$TMP_DIR"' EXIT
           PORTABLE_TARBALL="$TMP_DIR/openlinear-linux-x64.tar.gz"
-          bash ./scripts/package-linux-portable.sh "${GITHUB_REF_NAME#v}" "$PORTABLE_TARBALL"
+          bash ./scripts/package-linux-portable.sh "${RELEASE_TAG#v}" "$PORTABLE_TARBALL"
           tar -xzf "$PORTABLE_TARBALL" -C "$TMP_DIR"
           timeout 15s "$TMP_DIR/openlinear-linux-x64/openlinear-sidecar" > "$TMP_DIR/sidecar.log" 2>&1 || true
           cat "$TMP_DIR/sidecar.log"
@@ -106,7 +114,7 @@ jobs:
       - name: Prepare release artifacts
         run: |
           set -euo pipefail
-          VERSION=${GITHUB_REF_NAME#v}
+          VERSION=${RELEASE_TAG#v}
           mkdir -p dist/release
           if [ "${{ runner.os }}" = "Linux" ]; then
             DEB=$(ls apps/desktop/src-tauri/target/release/bundle/deb/*.deb | head -n 1)
@@ -161,6 +169,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: ${{ env.RELEASE_TAG }}
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -178,7 +188,7 @@ jobs:
       - name: Verify tag matches package version
         run: |
           set -euo pipefail
-          VERSION=${GITHUB_REF_NAME#v}
+          VERSION=${RELEASE_TAG#v}
           PACKAGE_VERSION=$(node -p "require('./packages/openlinear/package.json').version")
           if [ "$VERSION" != "$PACKAGE_VERSION" ]; then
             echo "Tag version $VERSION does not match packages/openlinear/package.json version $PACKAGE_VERSION" >&2
@@ -207,9 +217,11 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: ${{ env.RELEASE_TAG }}
 
       - name: Sync Arch package metadata
-        run: bash ./scripts/sync-aur-metadata.sh "${GITHUB_REF_NAME#v}"
+        run: bash ./scripts/sync-aur-metadata.sh "${RELEASE_TAG#v}"
 
       - name: Publish to AUR
         uses: KSXGitHub/github-actions-deploy-aur@v3.0.1
@@ -222,4 +234,4 @@ jobs:
           commit_username: kaizen403
           commit_email: kaizen403@proton.me
           ssh_private_key: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
-          commit_message: "Update to ${{ github.ref_name }}"
+          commit_message: "Update to ${{ env.RELEASE_TAG }}"

scripts/bump-version.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+# bump-version.sh — Bump the patch version across all version files
+#
+# Usage:
+#   ./scripts/bump-version.sh           # auto-increment patch
+#   ./scripts/bump-version.sh 0.2.0     # set explicit version
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(dirname "$SCRIPT_DIR")"
+
+NPM_PKG="$ROOT_DIR/packages/openlinear/package.json"
+TAURI_CONF="$ROOT_DIR/apps/desktop/src-tauri/tauri.conf.json"
+
+CURRENT=$(node -p "require('$NPM_PKG').version")
+
+if [ -n "${1:-}" ]; then
+  NEXT="$1"
+else
+  IFS='.' read -r MAJOR MINOR PATCH <<< "$CURRENT"
+  NEXT="$MAJOR.$MINOR.$((PATCH + 1))"
+fi
+
+if [ "$CURRENT" = "$NEXT" ]; then
+  echo "Already at $CURRENT, nothing to bump"
+  exit 0
+fi
+
+echo "Bumping $CURRENT → $NEXT"
+
+node -e "
+  const fs = require('fs');
+  const pkg = JSON.parse(fs.readFileSync('$NPM_PKG', 'utf8'));
+  pkg.version = '$NEXT';
+  fs.writeFileSync('$NPM_PKG', JSON.stringify(pkg, null, 2) + '\n');
+"
+
+node -e "
+  const fs = require('fs');
+  const conf = JSON.parse(fs.readFileSync('$TAURI_CONF', 'utf8'));
+  conf.version = '$NEXT';
+  fs.writeFileSync('$TAURI_CONF', JSON.stringify(conf, null, 2) + '\n');
+"
+
+bash "$SCRIPT_DIR/sync-aur-metadata.sh" "$NEXT"
+
+echo "Done — all files bumped to $NEXT"