.goreleaser.yaml

# Copyright 2026 Bitwise Media Group Ltd.
# SPDX-License-Identifier: MIT

# GoReleaser config. Releases are cut by release-please: when its release PR merges,
# the reusable release workflow (.github/workflows/release.yaml) pushes the vX.Y.Z
# tag, leaves a draft GitHub release, and runs `goreleaser release` — which adopts
# that draft (use_existing_draft + mode: replace below). Build locally without
# publishing via `make snapshot`.
#
# Produces cross-platform binary archives + checksums + SBOMs + keyless cosign
# signatures, and pushes a Homebrew cask to bitwise-media-group/homebrew-tap. SBOMs
# are generated by the syft pinned in the make/ library (.syft-version), installed
# to .bin/ and put on PATH by whoever runs goreleaser (the library's snapshot and
# release targets locally, the reusable release workflow in CI). dotty drives
# local hardware and Homebrew, so no container images.
version: 2

# ^ref: https://goreleaser.com/errors/multiple-tokens/
force_token: github

project_name: dotty

before:
    hooks:
        - go mod download

env:
    - CGO_ENABLED=0

builds:
    - id: dotty
      main: ./cmd
      binary: dotty
      flags:
          - -trimpath
      ldflags:
          - -s -w
          - -X github.com/bitwise-media-group/dotty/internal/version.Version={{ .Version }}
          - -X github.com/bitwise-media-group/dotty/internal/version.Commit={{ .ShortCommit }}
          - -X github.com/bitwise-media-group/dotty/internal/version.BuildDate={{ .Date }}
      goos:
          - linux
          - darwin
      goarch:
          - amd64
          - arm64

archives:
    - id: dotty
      formats: [tar.gz]
      name_template: "{{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
      files:
          - LICENSE
          # Ship the man pages in the archive so the Homebrew cask can install
          # them from the extracted tarball (see homebrew_casks.manpages below).
          - docs/man/*.1

checksum:
    name_template: checksums.txt

# ^ref: https://goreleaser.com/customization/sign/sign/
# Keyless cosign signatures over each built binary; the reusable release workflow
# supplies the GitHub Actions OIDC token. `make snapshot` skips this (--skip=sign).
binary_signs:
    - cmd: cosign
      signature: "{{ .Binary }}_{{ .Os }}_{{ .Arch }}.sigstore.json"
      args:
          - sign-blob
          - --bundle=${signature}
          - ${artifact}
          - --yes
      output: true

sboms:
    - artifacts: archive
      # syft is installed from the make/ library's .syft-version pin into .bin/,
      # which the library's snapshot/release targets put on PATH.
      cmd: syft
      args:
          - $artifact
          - --output
          - spdx-json=$document

snapshot:
    version_template: "{{ incpatch .Version }}-snapshot-{{ .ShortCommit }}"

changelog:
    sort: asc
    use: github
    format: "{{ .SHA }}: {{ .Message }}{{ if and (not .IsNightly) .Logins }} ({{ .Logins | englishJoin }}){{ end }}"
    filters:
        exclude:
            - "^test"
            - "^chore"
            - "^build"
    groups:
        - title: "New Features"
          regexp: '^.*?feat(\(.+\))??!?:.+$'
          order: 100
        - title: "Security Updates"
          regexp: '^.*?sec(\(.+\))??!?:.+$'
          order: 150
        - title: "Bug Fixes"
          regexp: '^.*?(fix|refactor)(\(.+\))??!?:.+$'
          order: 200
        - title: "Documentation Updates"
          regexp: ^.*?docs?(\(.+\))??!?:.+$
          order: 400
        - title: Other Work
          order: 9999

release:
    github:
        owner: bitwise-media-group
        name: dotty
    # The release-please job in release.yaml leaves a draft release named after
    # the tag it pushes. Adopt that draft instead of creating a second release,
    # swap its release-please notes for the grouped changelog above, and
    # undraft it only once every asset has been uploaded.
    use_existing_draft: true
    mode: replace

# ^ref: https://goreleaser.com/customization/homebrew_casks/
homebrew_casks:
    - name: dotty
      binaries: [dotty]
      # Glob-matched against the files bundled into the archive above; goreleaser
      # emits a `manpage "..."` stanza for each match (e.g. docs/man/dotty.1).
      manpages:
          - docs/man/*.1
      generate_completions_from_executable:
          executable: dotty
          shell_parameter_format: cobra
      homepage: https://github.com/bitwise-media-group/dotty
      description: Terminal-driven dotfiles workflow — portable profiles, reproducible Brewfiles, and YubiKey-backed SSH signing keys
      skip_upload: auto
      repository:
          owner: bitwise-media-group
          name: homebrew-tap
          branch: main
          token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
      hooks:
          pre:
              install: |
                  if OS.mac?
                    system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/dotty"]
                  end