ci: allow manual prerelease runs

.github/workflows/ci.yml

@@ -6,6 +6,12 @@ on:
   pull_request:
     branches: [ main ]
   workflow_call:
+    inputs:
+      checkout-ref:
+        description: Git ref to check out when this workflow is called by another workflow.
+        required: false
+        type: string
+        default: ''
 
 concurrency:
   group: ci-${{ github.head_ref || github.run_id }}
@@ -17,6 +23,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        with:
+          ref: ${{ inputs.checkout-ref || github.ref }}
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
@@ -46,6 +54,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        with:
+          ref: ${{ inputs.checkout-ref || github.ref }}
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:

.github/workflows/release.yml

@@ -4,6 +4,17 @@ on:
   push:
     tags:
       - v[0-9].[0-9]+.[0-9]+
+  workflow_dispatch:
+    inputs:
+      release-tag:
+        description: Release tag, for example v1.2.3
+        required: true
+        type: string
+      pre-release:
+        description: Pre-release
+        required: false
+        type: boolean
+        default: false
 
 concurrency:
   group: release-${{ github.head_ref || github.run_id }}
@@ -15,22 +26,38 @@ permissions:
 jobs:
   ci:
     uses: ./.github/workflows/ci.yml
+    with:
+      checkout-ref: ${{ inputs['release-tag'] || github.ref }}
     secrets: inherit
 
   release:
     needs: ci
     runs-on: ubuntu-latest
-    steps: 
+    steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           fetch-depth: 0
+          ref: ${{ inputs['release-tag'] || github.ref }}
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
           go-version-file: 'go.mod'
+      - name: Configure GoReleaser release type
+        env:
+          PRE_RELEASE: ${{ inputs['pre-release'] || false }}
+        run: |
+          cp .goreleaser.yaml .goreleaser.release.yaml
+          if [ "$PRE_RELEASE" = "true" ]; then
+            {
+              printf '\n'
+              printf 'release:\n'
+              printf '  prerelease: true\n'
+            } >> .goreleaser.release.yaml
+          fi
       - uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
         with:
           distribution: goreleaser
           version: '~> v2'
-          args: release --clean
+          args: release --clean --config .goreleaser.release.yaml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GORELEASER_CURRENT_TAG: ${{ inputs['release-tag'] || github.ref_name }}