ci: add trunk-triggered latest release workflow

Co-authored-by: D <[email protected]>

Author: DCodeBot

.github/workflows/release-latest.yml

@@ -0,0 +1,47 @@
+name: release-latest
+
+on:
+  push:
+    branches:
+      - trunk
+
+permissions:
+  contents: write
+
+jobs:
+  build-and-release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - name: Build linux amd64 binary
+        run: |
+          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 \
+            go build \
+            -trimpath \
+            -ldflags "-s -w -X 'github.com/dector/ror/internal/env.version=latest' -X 'github.com/dector/ror/internal/env.commit=${GITHUB_SHA}' -X 'github.com/dector/ror/internal/env.time=$(date -u +%Y-%m-%dT%H:%M:%SZ)'" \
+            -o ./ror \
+            ./cmd/ror
+
+          tar -czf ror-linux-amd64.tar.gz ror
+
+      - name: Replace latest release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          if gh release view latest >/dev/null 2>&1; then
+            gh release delete latest --cleanup-tag --yes
+          fi
+
+          gh release create latest \
+            ror-linux-amd64.tar.gz \
+            --title "latest" \
+            --notes "Automated build from ${GITHUB_SHA}" \
+            --latest