@@ -4,296 +4,72 @@ on:
   workflow_dispatch:
     inputs:
       version:
+        description: Version to release, in X.Y.Z form.
         required: true
-        default: 'x.y.z'
+        type: string
+      dry-run:
+        description: Check and build everything but do not open the version PR, tag, release or publish.
+        type: boolean
+        default: false
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 
 jobs:
-  checks:
-    name: Version check
-    runs-on: ubuntu-26.04
-    steps:
-    - name: Checkout repository
-      id: repo
-      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-    - name: Set up Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-      with:
-        python-version: 3.14.8
-
-    - name: Get latest release from pip
-      id: latestreleased
-      run: |
-        PREVIOUS_VERSION=$(python -m pip index versions CodeEntropy | grep "CodeEntropy" | cut -d "(" -f2 | cut -d ")" -f1)
-        echo "pip_tag=$PREVIOUS_VERSION" >> "$GITHUB_OUTPUT"
-        echo $PREVIOUS_VERSION
-
-    - name: version comparison
-      id: compare
-      run: |
-        pip3 install semver
-        output=$(pysemver compare ${{ steps.latestreleased.outputs.pip_tag }} ${{ github.event.inputs.version }})
-        if [ $output -ge 0 ]; then exit 1; fi
-
-  version:
-    name: prepare ${{ github.event.inputs.version }}
-    needs: checks
-    runs-on: ubuntu-26.04
-    steps:
-
-      - name: checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-      - name: Change version in repo and CITATION.cff
-        run: |
-          # Update Python package version
-          sed -i "s/__version__ =.*/__version__ = \"${{ github.event.inputs.version }}\"/g" CodeEntropy/__init__.py
-
-          # Update CITATION.cff version and date-released
-          if [ -f CITATION.cff ]; then
-            sed -i -E "s/^(version:\s*).*/\1${{ github.event.inputs.version }}/" CITATION.cff
-            sed -i -E "s/^(date-released:\s*).*/\1'$(date -u +%F)'/" CITATION.cff
-          fi
-
-      - name: send PR
-        id: pr_id
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
-        with:
-          commit-message: Update version to ${{ github.event.inputs.version }}
-          branch: version-update
-          title: "Update to version ${{ github.event.inputs.version }}"
-          body: |
-            Update version
-            - Update the __init__.py with new release
-            - Update CITATION.cff version & date-released
-            - Auto-generated by [CI]
-          committer: version-updater <vu.bot@users.noreply.github.com>
-          author: version-updater <vu.bot@users.noreply.github.com>
-          base: main
-          signoff: false
-          draft: false
-
-      - name: auto approve review
-        uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363 # v4.0.0
-        with:
-          pull-request-number: ${{ steps.pr_id.outputs.pull-request-number }}
-          review-message: "Auto approved version bump PR"
-          github-token: ${{ secrets.AUTO_PR_MERGE }}
-
-      - name: merge PR
-        run: gh pr merge --merge --delete-branch --auto "${{ steps.pr_id.outputs.pull-request-number }}"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  tag:
-    name: tag release
-    needs: version
-    runs-on: ubuntu-26.04
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          ref: main
-
-      - name: tag v${{ github.event.inputs.version }}
-        run: |
-          git config user.name github-actions
-          git config user.email github-actions@github.com
-          git tag ${{ github.event.inputs.version }}
-          git push origin tag ${{ github.event.inputs.version }}
-
-  release:
-    name: make github release
-    needs: tag
-    runs-on: ubuntu-26.04
-    steps:
-      - name: create release
-        id: create_release
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
-        with:
-          name: v${{ github.event.inputs.version }}
-          generate_release_notes: true
-          tag_name: ${{ github.event.inputs.version }}
-
-      - name: fetch generated changelog
-        id: changelog
-        if: steps.create_release.outcome == 'success'
-        continue-on-error: true
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          # generate_release_notes builds the changelog server-side, so pull
-          # it back down here rather than trying to reconstruct it locally.
-          gh release view "${{ github.event.inputs.version }}" --repo "${{ github.repository }}" --json body -q .body > changelog.txt
-
-      - name: notify Zulip of release
-        if: steps.create_release.outcome == 'success'
-        continue-on-error: true
-        env:
-          ZULIP_BOT_EMAIL: ${{ secrets.ZULIP_BOT_EMAIL }}
-          ZULIP_BOT_API_KEY: ${{ secrets.ZULIP_BOT_API_KEY }}
-          ZULIP_SITE: ${{ secrets.ZULIP_SITE }}
-          REPO: ${{ github.event.repository.name }}
-          TAG: v${{ github.event.inputs.version }}
-          RELEASE_URL: ${{ steps.create_release.outputs.url }}
-        run: |
-          CONTENT=$(cat <<EOF
-          **${REPO}** [${TAG}](${RELEASE_URL}) has been released 🎉
-
-          $(cat changelog.txt)
-          EOF
-          )
-
-          curl -sSf "${ZULIP_SITE}/api/v1/messages" \
-            -u "${ZULIP_BOT_EMAIL}:${ZULIP_BOT_API_KEY}" \
-            --data-urlencode type=stream \
-            --data-urlencode "to=announcements" \
-            --data-urlencode "topic=software releases" \
-            --data-urlencode "content=${CONTENT}"
-
-      - name: checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-
-      - name: Build dispatch payload
-        id: payload
-        shell: bash
-        env:
-          NAME: ${{ github.event.repository.name }}
-          REPO_URL: ${{ github.server_url }}/${{ github.repository }}
-          VERSION: ${{ github.event.inputs.version }}
-          META_FILE: .github/web-meta.yaml
-          CFF_FILE: CITATION.cff
-        run: |
-          for f in "$META_FILE" "$CFF_FILE"; do
-            if [ ! -f "$f" ]; then
-              echo "::error::$f not found in $(pwd)"
-              ls -la . .github
-              exit 1
-            fi
-          done
-
-          # Constructed URLs (Read the Docs slugs are lowercase)
-          github_url="$REPO_URL"
-          docs_url="https://${NAME,,}.readthedocs.io/"
-
-          # Metadata from web-meta.yaml
-          meta=$(yq -o=json '.' "$META_FILE")
-
-          # Authors from CITATION.cff -> { "Full Name": "orcid url" }
-          authors=$(yq -o=json '.authors' "$CFF_FILE" | jq -c '
-            map({
-              key: (
-                if .name then .name
-                else ([."given-names", ."family-names"] | map(select(. != null)) | join(" "))
-                end
-              ),
-              value: (.orcid // "")
-            }) | from_entries')
-
-          payload=$(jq -nc \
-            --arg name "$NAME" \
-            --arg github "$github_url" \
-            --arg docs "$docs_url" \
-            --arg version "$VERSION" \
-            --argjson meta "$meta" \
-            --argjson authors "$authors" \
-            '{
-              name: $name,
-              meta: ({github: $github, docs: $docs} + $meta + {version: $version, authors: $authors})
-            }')
-
-          echo "payload: $payload"
-          echo "json=$payload" >> "$GITHUB_OUTPUT"
-
-      - name: Post version to website metadata repo
-        uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
-        with:
-          token: ${{ secrets.BUILD_TOKEN }}
-          repository: ccpbiosim/ccpbiosim.github.io
-          event-type: software
-          client-payload: ${{ steps.payload.outputs.json }}
+  prepare:
+    name: Prepare
+    uses: CCPBioSim/.github/.github/workflows/release-prepare.yaml@3067c1c61061e0c81a93c02032a9c7a1d74c815d # 0.3.0
+    permissions:
+      contents: write
+      pull-requests: write
+    with:
+      version: ${{ inputs.version }}
+      dry-run: ${{ inputs.dry-run }}
+      version-files: >-
+        [
+          {"path": "CodeEntropy/__init__.py", "pattern": "^__version__ =.*", "replace": "__version__ = \"{version}\""},
+          {"path": "CITATION.cff", "pattern": "^version:.*", "replace": "version: {version}"},
+          {"path": "CITATION.cff", "pattern": "^date-released:.*", "replace": "date-released: '{date}'"}
+        ]
+    secrets:
+      AUTO_PR_MERGE: ${{ secrets.AUTO_PR_MERGE }}
+      ZULIP_BOT_EMAIL: ${{ secrets.ZULIP_BOT_EMAIL }}
+      ZULIP_BOT_API_KEY: ${{ secrets.ZULIP_BOT_API_KEY }}
+      ZULIP_SITE: ${{ secrets.ZULIP_SITE }}
+
+  website:
+    name: Website
+    needs: prepare
+    uses: CCPBioSim/.github/.github/workflows/release-website.yaml@3067c1c61061e0c81a93c02032a9c7a1d74c815d # 0.3.0
+    permissions:
+      contents: read
+    with:
+      version: ${{ inputs.version }}
+      tag: ${{ needs.prepare.outputs.tag }}
+      dry-run: ${{ inputs.dry-run }}
+    secrets:
+      BUILD_TOKEN: ${{ secrets.BUILD_TOKEN }}
 
   pypi:
-    name: make pypi release
-    needs: [tag, release]
-    runs-on: ubuntu-26.04
-    steps:
-
-    - name: checkout
-      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      with:
-        ref: main
-
-    - name: Set up Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-      with:
-        python-version: 3.14.8
-
-    - name: Install flit
-      run: |
-        python -m pip install --upgrade pip
-        python -m pip install "flit>=4,<5" "flit_core>=4,<5"
-
-    - name: Build and publish
-      run: |
-        flit publish --use-vcs
-      env:
-        FLIT_USERNAME: __token__
-        FLIT_PASSWORD:  ${{ secrets.PYPI_API_TOKEN }}
+    name: PyPI
+    needs: prepare
+    uses: CCPBioSim/.github/.github/workflows/release-pypi.yaml@3067c1c61061e0c81a93c02032a9c7a1d74c815d # 0.3.0
+    permissions:
+      contents: read
+    with:
+      tag: ${{ needs.prepare.outputs.tag || inputs.version }}
+      dry-run: ${{ inputs.dry-run }}
+    secrets:
+      PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
 
   conda:
-    name: publish conda to anaconda.org
-    needs: [tag, release]
-    runs-on: ubuntu-26.04
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          ref: main
-
-      - name: Set version in conda recipe
-        run: |
-          sed -i "s/^{% set version = \".*\" %}$/{% set version = \"${{ github.event.inputs.version }}\" %}/" conda-recipe/meta.yaml
-          grep '{% set version' conda-recipe/meta.yaml
-
-      - name: Setup Conda (conda-forge only)
-        uses: conda-incubator/setup-miniconda@be893c923ea9cf1cf7cd510fbdde27c7e18cbdcb # v4.1.0
-        with:
-          miniforge-variant: Miniforge3
-          python-version: "3.14"
-          auto-activate: true
-          activate-environment: base
-          conda-remove-defaults: true
-          channels: conda-forge
-          channel-priority: strict
-
-      - name: Install build tools
-        shell: bash -l {0}
-        run: |
-          conda install -y conda-build anaconda-client
-          conda config --set anaconda_upload no
-          conda list conda-build
-          conda build --help
-
-      - name: Build package
-        shell: bash -l {0}
-        env:
-          PIP_NO_INDEX: "0"
-        run: |
-          PKG_PATH=$(conda build conda-recipe --output)
-          echo "PKG_PATH=$PKG_PATH" >> "$GITHUB_ENV"
-          conda build conda-recipe
-          test -f "$PKG_PATH"
-          echo "Built: $PKG_PATH"
-
-      - name: Upload to Anaconda
-        shell: bash -l {0}
-        env:
-          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_TOKEN }}
-        run: |
-          anaconda -t "$ANACONDA_API_TOKEN" upload "$PKG_PATH" --user CCPBioSim --force
+    name: Conda
+    needs: prepare
+    uses: CCPBioSim/.github/.github/workflows/release-conda.yaml@3067c1c61061e0c81a93c02032a9c7a1d74c815d # 0.3.0
+    permissions:
+      contents: read
+    with:
+      tag: ${{ needs.prepare.outputs.tag || inputs.version }}
+      dry-run: ${{ inputs.dry-run }}
+    secrets:
+      ANACONDA_TOKEN: ${{ secrets.ANACONDA_TOKEN }}