Validate version on release (#22)

Fixes github/spark#2259

Our typical release process for this component is just to set a tagged
release and let that go. This has the downside that our binary also
thinks it knows its version over in cmd/version.go.

Rather than do something elaborate when we're not releasing this often,
this PR simply adds a guardrail that will fail the release if the
versions don't align. In that case, the move is to remove the partial
release/tag, commit the updated version, and then release.

This should be sufficient for the moment, and if we get working on this
more often to where it's an annoyance, we can put a more thorough system
in place.

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: jasonrclark

.github/workflows/check-version.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -ex
+
+TAG="${GITHUB_REF_NAME:-${GITHUB_REF#refs/tags/}}"
+if [ -z "$TAG" ] || [ "$TAG" = "$GITHUB_REF" ]; then
+  echo "Unable to determine tag from GitHub Actions environment"
+  exit 1
+fi
+FILE_VERSION=$(sed -nE 's/var Version = "(.*)"/\1/p' cmd/version.go)
+
+if [ "$TAG" != "v$FILE_VERSION" ]; then
+  echo "Version mismatch: tag is $TAG but version.go has $FILE_VERSION"
+  exit 1
+fi

.github/workflows/release.yml

@@ -13,6 +13,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+
+      - name: Confirm tag and code versions match
+        run: |
+          .github/workflows/check-version.sh
+
       - uses: cli/gh-extension-precompile@v2
         with:
           generate_attestations: true

cmd/version.go

@@ -8,7 +8,7 @@ import (
 )
 
 // Version of the CLI app.
-var Version = "0.1.0"
+var Version = "0.0.10"
 
 // The command prints out the version of the CLI app.
 func init() {