name: 🆙 Release file check

on:
  # zizmor: ignore[dangerous-triggers] required so autopub can comment on
  # fork PRs; sparse-checkout below limits the PR working tree to RELEASE.md
  # and pyproject.toml, which autopub `check` parses as data only.
  pull_request_target:
    types: [synchronize, reopened, opened, ready_for_review]
    branches:
      - main
    paths:
      - "strawberry/**"
      - "pyproject.toml"

permissions:
  contents: read

jobs:
  check-release:
    name: Release check
    runs-on: ubuntu-latest
    permissions:
      contents: read
      issues: write
      pull-requests: write
    if: github.event.pull_request.user.type != 'Bot'

    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
        with:
          ref: "refs/pull/${{ github.event.number }}/merge"
          persist-credentials: false
          sparse-checkout: |
            RELEASE.md
            pyproject.toml
          sparse-checkout-cone-mode: false

      - name: Check for release
        id: check
        uses: autopub/autopub-action@5fdc82e84c048a82303de6b5c5a9d027665e73cf # v1.1.1
        with:
          command: check
          autopub-version: "1.0.0a58"
          fail-on-missing: "true"
          extra-plugins: strawberry-autopub-plugins
