name: Update Version

on:
  push:
    branches:
      - main
      - master

env:
  GIT_SSL_NO_VERIFY: true

jobs:
  update-version:
    name: Update Version
    runs-on: ubuntu-latest
    permissions:
      contents: write
    
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ secrets.PAT_TOKEN }}

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.11"

      - name: Install dependencies
        run: pip install python-semantic-release

      - name: Configure Git
        run: |
          git config --local user.email "actions@gitea.local"
          git config --local user.name "Gitea Actions Bot"

      - name: Install Gitea certificate and run semantic-release
        env:
          GITEA_TOKEN: ${{ secrets.PAT_TOKEN }}
          REQUESTS_CA_BUNDLE: /etc/ssl/certs/gitea-ca-bundle.crt
          CURL_CA_BUNDLE: /etc/ssl/certs/gitea-ca-bundle.crt
        run: |
          echo "🔐 Получаем SSL сертификат Gitea..."
          
          echo | openssl s_client -connect 192.168.200.208:3000 -servername 192.168.200.208 2>/dev/null | openssl x509 > /tmp/gitea.crt
          
          if [ ! -s /tmp/gitea.crt ]; then
            echo "❌ Не удалось получить сертификат!"
            exit 1
          fi
          
          echo "✅ Сертификат получен"
          
          cat /etc/ssl/certs/ca-certificates.crt /tmp/gitea.crt > /etc/ssl/certs/gitea-ca-bundle.crt
          
          echo "✅ CA bundle создан"
          
          CERTIFI_PATH=$(python3 -c "import certifi; print(certifi.where())")
          echo "certifi path: $CERTIFI_PATH"
          cat "$CERTIFI_PATH" /tmp/gitea.crt > /tmp/certifi-with-gitea.crt
          cp /tmp/certifi-with-gitea.crt "$CERTIFI_PATH"
          
          echo "✅ Сертификат добавлен в certifi"
          
          python3 -c "
          import requests
          import os
          os.environ['REQUESTS_CA_BUNDLE'] = '/etc/ssl/certs/gitea-ca-bundle.crt'
          try:
              r = requests.get('https://192.168.200.208:3000')
              print(f'✅ HTTPS подключение работает! Status: {r.status_code}')
          except Exception as e:
              print(f'❌ Ошибка: {e}')
              exit(1)
          "
          
          echo ""
          echo "🚀 Запускаем semantic-release..."
          semantic-release version