validate-version-alignment.yml

name: Version Alignment Check

# Blocks merges that would leave pom.xml's <version> out of sync with
# CHANGELOG.md's most recent released section. The invariant on main:
#   <version> in pom.xml  ==  first `## [X.Y.Z]` section in CHANGELOG
# When it's time to release, a single release-prep PR renames
# `[Unreleased]` → `[X.Y.Z] - YYYY-MM-DD` AND bumps pom.xml in the
# same commit, so this gate always sees them together.
#
# See .github/scripts/validate-version-alignment.sh for the script.

on:
  pull_request:
    branches: [main]
    paths:
      - 'CHANGELOG.md'
      - 'pom.xml'
      - '.github/scripts/validate-version-alignment.sh'
      - '.github/workflows/validate-version-alignment.yml'
  push:
    branches: [main]
    paths:
      - 'CHANGELOG.md'
      - 'pom.xml'
      - '.github/scripts/validate-version-alignment.sh'
      - '.github/workflows/validate-version-alignment.yml'

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

env:
  AXONFLOW_TELEMETRY: 'off'

jobs:
  validate-versions:
    name: Validate Version Alignment
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Check version alignment
        run: ./.github/scripts/validate-version-alignment.sh