70 lines
2.0 KiB
YAML
70 lines
2.0 KiB
YAML
name: Release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
jobs:
|
|
# ── 1. Build, GPG-sign, deploy to Maven releases ──────────────────────────
|
|
release:
|
|
name: Build, Sign & Deploy
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Extract version from tag
|
|
id: version
|
|
run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
|
|
|
|
- name: Set up Temurin 21
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
distribution: temurin
|
|
java-version: 21
|
|
cache: maven
|
|
|
|
- name: Import GPG key
|
|
run: |
|
|
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
|
|
GPG_KEY_ID=$(gpg --list-secret-keys --with-colons | grep '^sec' | cut -d: -f5 | head -1)
|
|
echo "GPG_KEY_ID=$GPG_KEY_ID" >> $GITHUB_ENV
|
|
|
|
- name: Build, sign and deploy to releases
|
|
run: |
|
|
mvn -B --settings .github/settings.xml \
|
|
-DperformRelease=true \
|
|
-Dgpg.keyname=$GPG_KEY_ID \
|
|
clean deploy
|
|
env:
|
|
MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
|
|
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
|
|
|
|
- name: Create GitHub Release
|
|
uses: softprops/action-gh-release@v2
|
|
with:
|
|
tag_name: ${{ github.ref_name }}
|
|
name: ${{ github.ref_name }}
|
|
generate_release_notes: true
|
|
draft: false
|
|
prerelease: false
|
|
|
|
outputs:
|
|
version: ${{ steps.version.outputs.VERSION }}
|
|
|
|
# ── 2. Publish JavaDoc (delegated to docs.yml — single source of truth) ───
|
|
docs:
|
|
name: Publish JavaDoc
|
|
needs: release
|
|
uses: ./.github/workflows/docs.yml
|
|
with:
|
|
version: ${{ needs.release.outputs.version }}
|
|
secrets:
|
|
MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
|
|
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }} |