From ed0f6d23fe3da1418c72f0430fcbbdf29a21bad7 Mon Sep 17 00:00:00 2001
From: Weston Blieden <mblieden@gmail.com>
Date: Fri, 21 Aug 2026 14:50:11 +0200
Subject: [PATCH] Add Dependabot; never target an already-published version

---
 ci/resolve-version.sh | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/ci/resolve-version.sh b/ci/resolve-version.sh
index 45874bd..1a88c3d 100755
--- a/ci/resolve-version.sh
+++ b/ci/resolve-version.sh
@@ -139,6 +139,19 @@ if [ "$INPUT_FORCE" = true ]; then
 	RELEASE=true
 fi
 
+# Never aim at a version that is already published. Stepping forward here means
+# a long build is not wasted only to be rejected by the release job. An explicit
+# version input is respected as given.
+if [ "$RELEASE" = true ] && [ -z "$INPUT_VERSION" ] && command -v gh >/dev/null 2>&1; then
+	attempts=0
+	while [ "$attempts" -lt 20 ] &&
+		gh release view "v$TARGET" --json isDraft --jq '.isDraft' 2>/dev/null | grep -qx false; do
+		echo "v$TARGET is already published; stepping forward"
+		TARGET=$(bump_patch "$TARGET")
+		attempts=$((attempts + 1))
+	done
+fi
+
 cat <<EOF
 policy   : $POLICY
 current  : $CURRENT