release.yaml

# .github/workflows/release.yml
name: Release

on:
  push:
    branches:
      - main

permissions:
  contents: write
  pull-requests: write
  issues: write

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "lts/*"

      - name: Install dependencies
        run: npm ci

      - name: Get package version
        id: package_version
        run: |
          VERSION=$(node -p "require('./package.json').version")
          echo "VERSION=$VERSION" >> $GITHUB_ENV

      - name: Get Latest Successful build-circuits Run ID
        id: get_run_id
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          # Fetch the latest successful run of the build-circuits workflow on main
          response=$(gh api -X GET /repos/${{ github.repository }}/actions/workflows/artifacts.yaml/runs \
            -f status=success -q '.workflow_runs | map(select(.name == "build-circuits")) | .[0].id')
          echo "run_id=${response}" >> $GITHUB_ENV

      - name: Download Build Artifacts
        uses: actions/download-artifact@v4
        with:
          name: circom-artifacts-v${{ env.VERSION }}
          path: .
          github-token: ${{ secrets.GITHUB_TOKEN }}
          run-id: ${{ env.run_id }}


      # Add artifacts to existing release
      - name: Upload Release Asset
        uses: softprops/action-gh-release@v2
        with:
          files: circom-artifacts-v${{ env.VERSION }}.zip
          tag_name: v${{ env.VERSION }}
          body: |
            Automated release of compiled Circom circuits
            Version: ${{ env.VERSION }}
            Commit: ${{ github.sha }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}