release-checks.yml

name: Release Checks

on:
  workflow_dispatch:
  push:
    tags:
      - "v*"

permissions:
  contents: read

jobs:
  release-checks:
    runs-on: ubuntu-24.04

    steps:
      - name: Check out repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Resolve change contract range
        id: contract_range
        run: |
          if [[ "${{ github.event.before }}" != "0000000000000000000000000000000000000000" ]]; then
            echo "range=${{ github.event.before }}..${{ github.sha }}" >> "$GITHUB_OUTPUT"
          else
            echo "range=HEAD^..HEAD" >> "$GITHUB_OUTPUT"
          fi

      - name: Install build and diagnostics dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends \
            cmake \
            doxygen \
            g++ \
            ninja-build \
            pkg-config \
            valgrind

      - name: Run release hygiene checks
        env:
          FRAME_CHANGE_CONTRACT_RANGE: ${{ steps.contract_range.outputs.range }}
        run: bash scripts/check-release-hygiene.sh

      - name: Run change contract checks
        env:
          FRAME_CHANGE_CONTRACT_RANGE: ${{ steps.contract_range.outputs.range }}
        run: bash scripts/check-change-contracts.sh

      - name: Configure debug build
        run: cmake -S . -B build -G Ninja -DCMAKE_BUILD_TYPE=Debug -DCMAKE_CXX_STANDARD=23

      - name: Build
        run: cmake --build build

      - name: Run tests
        run: ctest --test-dir build --output-on-failure

      - name: Validate install tree
        run: |
          INSTALL_DIR="$(mktemp -d)"
          cmake --install build --prefix "$INSTALL_DIR"
          test -x "$INSTALL_DIR/bin/frame_cli"

      - name: Run Valgrind Memcheck lane
        run: bash scripts/run-valgrind.sh build