name: Release Channel

# Same GITHUB_TOKEN push limitation as Next Channel (see next.yml).
#
# workflow_dispatch: use workflow from `main` for latest publish logic; checkout ref is always `release`.
on:
  push:
    branches: [release]
    # Same nix-refresh loop as next.yml — ignore lock-only merges from verify-nix PRs.
    paths-ignore:
      - "flake.lock"
      - "nix/**"
  workflow_dispatch:
  workflow_run:
    workflows: ["Promote next to release"]
    types: [completed]

jobs:
  publish-release:
    if: ${{ github.event_name != 'workflow_run' || github.event.workflow_run.conclusion == 'success' }}
    uses: ./.github/workflows/reusable-channel-publish.yml
    with:
      channel: release
      source_ref: release
      target_branch: release
      prerelease: false
      draft_release: true
      verify_nix: true
    secrets: inherit