# This workflow checks the version of the container image that is being built
# in the current pull request. If the version has already been published, the
# workflow fails to prevent PRs from being merged until the version has been
# incremented in the manifest file.
name: Version Check

on:
  pull_request:
    branches:
      - main

env:
  MANIFEST_PATH: action.yml

permissions:
  checks: write
  contents: read
  pull-requests: write

jobs:
  check-version:
    name: Version Check
    runs-on: ubuntu-latest

    if: ${{ github.actor != 'dependabot[bot]' }}

    steps:
      - name: Checkout
        id: checkout
        uses: actions/checkout@v6
        with:
          fetch-tags: true

      - name: Check Version
        id: check-version
        uses: issue-ops/semver@v3
        with:
          check-only: true
          manifest-path: ${{ env.MANIFEST_PATH }}