semvertag.yml

name: semvertag

# Dogfood the local composite action against this repo in DRY-RUN: on every
# push to main it computes the head commit's bump (exercising action.yml + the
# published semvertag) but never pushes a tag. This keeps action.yml honest —
# a breaking change fails the run before it can affect external users.
#
# Releases are NOT cut here. A release is a maintainer pushing a bare semver
# tag by hand, which triggers .github/workflows/release.yml (PyPI + GitHub
# Release + v0). Dry-run is load-bearing: it guarantees the only tags in the
# repo are deliberate release tags — do not give this job a push token or
# remove `dry-run: true`.

on:
  push:
    branches: [main]

permissions:
  contents: read

concurrency:
  group: semvertag
  cancel-in-progress: false

jobs:
  tag:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: ./
        with:
          strategy: conventional-commits
          dry-run: true