Update release and test CI

Author: swetha1654

.github/scripts/check-go-version-bump.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+BASE_SHA="${1:-}"
+HEAD_SHA="${2:-}"
+
+if [[ -z "$BASE_SHA" || -z "$HEAD_SHA" ]]; then
+  echo "Usage: $0 <base-sha> <head-sha>"
+  exit 1
+fi
+
+git fetch --no-tags --depth=1 origin "$BASE_SHA" "$HEAD_SHA"
+
+GO_CHANGED="$(git diff --name-only "$BASE_SHA" "$HEAD_SHA" -- '**/*.go' || true)"
+if [[ -z "$GO_CHANGED" ]]; then
+  echo "No Go files changed; skipping version bump check."
+  exit 0
+fi
+
+BASE_VERSION="$(git show "$BASE_SHA:aproxy.go" | sed -n 's/^var version = "\([^"]*\)"$/\1/p' | head -n1)"
+CURRENT_VERSION="$(sed -n 's/^var version = "\([^"]*\)"$/\1/p' aproxy.go | head -n1)"
+
+if [[ -z "$BASE_VERSION" ]]; then
+  echo "Could not parse base version from aproxy.go at $BASE_SHA"
+  exit 1
+fi
+
+if [[ -z "$CURRENT_VERSION" ]]; then
+  echo "Could not parse current version from aproxy.go"
+  exit 1
+fi
+
+LATEST="$(printf '%s\n%s\n' "$BASE_VERSION" "$CURRENT_VERSION" | sort -V | tail -n1)"
+if [[ "$CURRENT_VERSION" == "$BASE_VERSION" || "$LATEST" != "$CURRENT_VERSION" ]]; then
+  echo "Go files changed but version was not bumped."
+  echo "Base version:    $BASE_VERSION"
+  echo "Current version: $CURRENT_VERSION"
+  echo "Please bump var version in aproxy.go when modifying Go source files."
+  exit 1
+fi
+
+echo "Version bump check passed: $BASE_VERSION -> $CURRENT_VERSION"

.github/scripts/check-version-sync.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SNAP_VERSION="$(sed -n 's/^version:[[:space:]]*\(.*\)$/\1/p' snap/snapcraft.yaml | head -n1 | tr -d '"' | xargs)"
+GO_VERSION="$(sed -n 's/^var version = "\([^"]*\)"$/\1/p' aproxy.go | head -n1)"
+
+if [[ -z "$SNAP_VERSION" ]]; then
+  echo "Could not parse version from snap/snapcraft.yaml"
+  exit 1
+fi
+
+if [[ -z "$GO_VERSION" ]]; then
+  echo "Could not parse version from aproxy.go"
+  exit 1
+fi
+
+if [[ "$SNAP_VERSION" != "$GO_VERSION" ]]; then
+  echo "Version mismatch detected"
+  echo "snap/snapcraft.yaml version: $SNAP_VERSION"
+  echo "aproxy.go version:         $GO_VERSION"
+  echo "Keep both versions synchronized before merging or releasing."
+  exit 1
+fi
+
+echo "Version check passed: $GO_VERSION"

.github/workflows/release.yaml

@@ -1,12 +1,8 @@
 name: Release
 
 on:
-  workflow_dispatch:
-    inputs:
-      tag:
-        description: 'Release tag (e.g., v1.0.0)'
-        required: true
-        type: string
+  push:
+    branches: [ main ]
 
 permissions:
   contents: write
@@ -24,10 +20,19 @@ jobs:
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
 
+      - name: Validate Version Sync
+        run: |
+          bash .github/scripts/check-version-sync.sh
+
       - name: Create tag
         id: tag
         run: |
-          TAG="${{ inputs.tag }}"
+          GO_VERSION="$(sed -n 's/^var version = "\([^"]*\)"$/\1/p' aproxy.go | head -n1)"
+          if [[ -z "$GO_VERSION" ]]; then
+            echo "Could not parse version from aproxy.go"
+            exit 1
+          fi
+          TAG="v${GO_VERSION}"
           echo "tag=$TAG" >> "$GITHUB_OUTPUT"
           git tag -a "$TAG" -m "Release $TAG"
           git push origin "$TAG"

.github/workflows/tests.yaml

@@ -2,7 +2,6 @@ name: Tests
 
 on:
   pull_request:
-  workflow_call:
 
 jobs:
   test:
@@ -22,6 +21,14 @@ jobs:
           go fmt ./...
           git diff --exit-code
 
+      - name: Check Version Sync
+        run: |
+          bash .github/scripts/check-version-sync.sh
+
+      - name: Check Version Bump For Go Changes
+        run: |
+          bash .github/scripts/check-go-version-bump.sh "${{ github.event.pull_request.base.sha }}" "${{ github.event.pull_request.head.sha }}"
+
       - name: Build and Test
         run: |
           go test -race ./...

aproxy.go

@@ -24,7 +24,7 @@ import (
 	"golang.org/x/crypto/cryptobyte"
 )
 
-var version = "0.2.4"
+var version = "1.0.1"
 
 // PrereadConn is a wrapper around net.Conn that supports pre-reading from the underlying connection.
 // Any Read before the EndPreread can be undone and read again by calling the EndPreread function.

snap/snapcraft.yaml

@@ -1,5 +1,5 @@
 name: aproxy
-version: 0.2.5
+version: 1.0.1
 summary: Transparent proxy for HTTP and HTTPS/TLS connections.
 description: |
   Aproxy is a transparent proxy for HTTP and HTTPS/TLS connections. By