thomas-stegemann · Jun 22, 2026 · Jun 22, 2026 · Jun 22, 2026
diff --git a/.github/workflows/auto-tag-on-bowire-merge.yml b/.github/workflows/auto-tag-on-bowire-merge.yml
@@ -0,0 +1,63 @@
+# Auto-tags this repo's next patch version when a `bowire-cascade`-
+# labelled PR merges. That PR was opened by bowire-released.yml in
+# response to a Bowire main-repo release; passing CI gates the merge,
+# this workflow does the version bump on the sibling side.
+#
+# Drop verbatim into .github/workflows/auto-tag-on-bowire-merge.yml
+# on every sibling that participates in the cascade.
+#
+# Versioning model: patch-bump from the most recent semver tag.
+# v1.0.4 -> v1.0.5 on every passing bowire-cascade merge. If this
+# sibling needs a minor or major bump for unrelated reasons, do that
+# tag by hand -- this workflow only handles the auto-cascade case.
+#
+# Requires BOWIRE_DISPATCH_TOKEN (Contents R/W) so the tag push goes
+# through and triggers downstream release.yml workflows.
+
+name: Auto-tag on Bowire cascade merge
+
+on:
+  pull_request:
+    types: [closed]
+    branches: [main]
+
+permissions:
+  contents: write
+
+jobs:
+  tag:
+    if: |
+      github.event.pull_request.merged == true &&
+      contains(github.event.pull_request.labels.*.name, 'bowire-cascade')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          token: ${{ secrets.BOWIRE_DISPATCH_TOKEN }}
+          fetch-depth: 0
+
+      - name: Compute next patch version
+        id: ver
+        run: |
+          # Latest semver tag. Strip leading v, bump patch.
+          LATEST=$(git tag --sort=-version:refname --list 'v*' | head -1)
+          if [ -z "$LATEST" ]; then
+            NEW="v0.1.0"
+          else
+            stripped="${LATEST#v}"
+            major=$(echo "$stripped" | cut -d. -f1)
+            minor=$(echo "$stripped" | cut -d. -f2)
+            patch=$(echo "$stripped" | cut -d. -f3)
+            NEW="v${major}.${minor}.$((patch + 1))"
+          fi
+          echo "Latest: $LATEST -> New: $NEW"
+          echo "tag=$NEW" >> "$GITHUB_OUTPUT"
+
+      - name: Tag and push
+        env:
+          GH_TOKEN: ${{ secrets.BOWIRE_DISPATCH_TOKEN }}
+        run: |
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git tag -a "${{ steps.ver.outputs.tag }}" -m "Auto-tag after Bowire cascade merge (#${{ github.event.pull_request.number }})"
+          git push origin "${{ steps.ver.outputs.tag }}"
diff --git a/.github/workflows/bowire-released.yml b/.github/workflows/bowire-released.yml
@@ -0,0 +1,146 @@
+# Listens for a `bowire-released` repository_dispatch fired by
+# Kuestenlogik/Bowire's release.yml after a successful nuget.org push.
+# Bumps every Kuestenlogik.Bowire* PackageVersion in this repo to the
+# new version and opens a PR. The PR's CI gates the auto-merge; an
+# auto-tag workflow then bumps this repo's own version on merge.
+#
+# Drop verbatim into .github/workflows/bowire-released.yml on every
+# sibling repo that consumes the Kuestenlogik.Bowire NuGets.
+#
+# Requires BOWIRE_DISPATCH_TOKEN as an org-secret with:
+#   - Contents: Read and write
+#   - Pull requests: Read and write
+#
+# Versioning is async by design: this workflow only changes the
+# upstream dependency. Sibling's own version is bumped by the
+# auto-tag workflow that fires on the merge of the PR this opens.
+
+name: Bowire upstream release
+
+on:
+  repository_dispatch:
+    types: [bowire-released]
+  # Manual dispatch for testing / rerun:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Kuestenlogik.Bowire version to bump to'
+        required: true
+
+permissions:
+  contents: write
+  pull-requests: write
+
+concurrency:
+  group: bowire-released-${{ github.event.client_payload.version || github.event.inputs.version }}
+  cancel-in-progress: false
+
+jobs:
+  bump:
+    name: Bump Kuestenlogik.Bowire dependency
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          token: ${{ secrets.BOWIRE_DISPATCH_TOKEN }}
+
+      - name: Resolve version
+        id: ver
+        run: |
+          V="${{ github.event.client_payload.version || github.event.inputs.version }}"
+          if [ -z "$V" ]; then
+            echo "::error::no version provided"
+            exit 1
+          fi
+          echo "version=$V" >> "$GITHUB_OUTPUT"
+          echo "Target version: $V"
+
+      - name: Bump Kuestenlogik.Bowire* references
+        env:
+          NEW_V: ${{ steps.ver.outputs.version }}
+        run: |
+          # Two reference shapes can carry Kuestenlogik.Bowire* versions:
+          #   1. <PackageVersion> in Directory.Packages.props (CPM repos --
+          #      every Bowire.Protocol.* plugin, Bowire main, &c).
+          #   2. <PackageReference Version="..."> in individual .csproj
+          #      files (sample repos and templates keep these per-project
+          #      so a learner can copy one csproj and have it build
+          #      standalone without also taking Directory.Packages.props).
+          # Walk both. Idempotent / no-op when nothing matches.
+          touched=0
+          if [ -f Directory.Packages.props ]; then
+            n=$(grep -c 'Include="Kuestenlogik\.Bowire' Directory.Packages.props || true)
+            sed -i -E 's|(<PackageVersion[^>]*Include="Kuestenlogik\.Bowire(\.[A-Za-z]+)?"[^>]*Version=")[^"]+|\1'"${NEW_V}"'|g' Directory.Packages.props
+            touched=$((touched + n))
+            echo "Directory.Packages.props: touched $n PackageVersion line(s)."
+          fi
+          # Per-csproj PackageReference Version="..." -- skip ones that
+          # already point at the target version so the diff stays clean.
+          while IFS= read -r -d '' csproj; do
+            n=$(grep -cE 'PackageReference[^/]*Include="Kuestenlogik\.Bowire[^"]*"[^>]*Version="[^"]+' "$csproj" 2>/dev/null || echo 0)
+            if [ "$n" -gt 0 ]; then
+              sed -i -E 's|(<PackageReference[^>]*Include="Kuestenlogik\.Bowire(\.[A-Za-z]+)?"[^>]*Version=")[^"]+|\1'"${NEW_V}"'|g' "$csproj"
+              touched=$((touched + n))
+              echo "$csproj: touched $n PackageReference line(s)."
+            fi
+          done < <(find . -name '*.csproj' -not -path './bin/*' -not -path './obj/*' -print0)
+          echo "Total Kuestenlogik.Bowire* lines bumped: $touched"
+          git diff --shortstat
+
+      - name: Ensure labels exist
+        env:
+          GH_TOKEN: ${{ secrets.BOWIRE_DISPATCH_TOKEN }}
+        run: |
+          # gh pr create --label fails hard if the label doesn't exist
+          # on the repo. Create the two we use; ignore-failure to make
+          # this step idempotent.
+          gh api "repos/${{ github.repository }}/labels" \
+            -f name=dependencies -f color=0366d6 \
+            -f description='Pull requests that update a dependency' \
+            >/dev/null 2>&1 || true
+          gh api "repos/${{ github.repository }}/labels" \
+            -f name=bowire-cascade -f color=5319e7 \
+            -f description='Automated PR from Bowire main release cascade' \
+            >/dev/null 2>&1 || true
+
+      - name: Open PR + queue auto-merge
+        env:
+          GH_TOKEN: ${{ secrets.BOWIRE_DISPATCH_TOKEN }}
+          NEW_V: ${{ steps.ver.outputs.version }}
+        run: |
+          if git diff --quiet; then
+            echo "No changes -- already on $NEW_V or no matching lines."
+            exit 0
+          fi
+          BRANCH="chore/bump-bowire-${NEW_V}"
+          git config user.name 'github-actions[bot]'
+          git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
+          git checkout -b "$BRANCH"
+          # -A picks up whichever shape the bump touched -- Directory.Packages.props
+          # for CPM repos, the modified .csprojs for sample / template repos that
+          # use per-project PackageReference, or both.
+          git add -A
+          git commit -m "chore(deps): bump Kuestenlogik.Bowire to ${NEW_V}"
+          git push --force-with-lease origin "$BRANCH"
+          # Existing PR for this branch? Reuse it; otherwise create.
+          PR_NUMBER=$(gh pr list --head "$BRANCH" --state open --json number --jq '.[0].number')
+          if [ -z "$PR_NUMBER" ]; then
+            PR_URL=$(gh pr create \
+              --title "chore(deps): bump Kuestenlogik.Bowire to ${NEW_V}" \
+              --body "Automated bump triggered by [Bowire v${NEW_V}](https://github.com/Kuestenlogik/Bowire/releases/tag/v${NEW_V})." \
+              --label "dependencies" \
+              --label "bowire-cascade" \
+              --base main \
+              --head "$BRANCH")
+            PR_NUMBER=$(basename "$PR_URL")
+            echo "Opened #$PR_NUMBER"
+          else
+            echo "Reusing existing PR #$PR_NUMBER"
+          fi
+          # Queue auto-merge -- GitHub holds the merge until required
+          # checks pass. Rebase keeps the cascade PR's single bump
+          # commit 1:1 on main (matches the org-wide rebase-merge
+          # convention; squash would be identical for single-commit
+          # PRs but breaks consistency with the rest of the repo).
+          gh pr merge "$PR_NUMBER" --auto --rebase --delete-branch || \
+            echo "::warning::auto-merge could not be queued (branch protection? merge-queue?)"