|
| 1 | +# Copyright AGNTCY Contributors (https://github.com/agntcy) |
| 2 | +# SPDX-License-Identifier: Apache-2.0 |
| 3 | + |
| 4 | +--- |
| 5 | +name: release |
| 6 | + |
| 7 | +on: |
| 8 | + push: |
| 9 | + tags: ['v*'] # v0.1.0 -> io.agntcy.slim:slim-a2a-java:0.1.0 |
| 10 | + workflow_dispatch: |
| 11 | + inputs: |
| 12 | + version: |
| 13 | + description: "Version without leading v" |
| 14 | + required: true |
| 15 | + type: string |
| 16 | + |
| 17 | +permissions: |
| 18 | + contents: read |
| 19 | + |
| 20 | +jobs: |
| 21 | + release-maven-central: |
| 22 | + name: Release to Maven Central |
| 23 | + runs-on: ubuntu-latest |
| 24 | + steps: |
| 25 | + - uses: actions/checkout@v4 |
| 26 | + with: |
| 27 | + persist-credentials: false |
| 28 | + |
| 29 | + - name: Setup Java 21 |
| 30 | + uses: actions/setup-java@v4 |
| 31 | + with: |
| 32 | + distribution: temurin |
| 33 | + java-version: '21' |
| 34 | + cache: maven |
| 35 | + |
| 36 | + - name: Extract version |
| 37 | + id: v |
| 38 | + env: |
| 39 | + REF_NAME: "${{ github.ref_name }}" |
| 40 | + INPUT_VERSION: "${{ inputs.version }}" |
| 41 | + run: | |
| 42 | + if [ -n "$INPUT_VERSION" ]; then VERSION="$INPUT_VERSION"; else VERSION="${REF_NAME#v}"; fi |
| 43 | + echo "version=$VERSION" >> "$GITHUB_OUTPUT" |
| 44 | +
|
| 45 | + - name: Configure Maven Central credentials |
| 46 | + env: |
| 47 | + MVN_TOKEN_NAME: ${{ secrets.MVN_TOKEN_NAME }} |
| 48 | + MVN_TOKEN_PASSWORD: ${{ secrets.MVN_TOKEN_PASSWORD }} |
| 49 | + run: | |
| 50 | + mkdir -p ~/.m2 |
| 51 | + cat > ~/.m2/settings.xml << 'EOF' |
| 52 | + <settings xmlns="http://maven.apache.org/SETTINGS/1.2.0"> |
| 53 | + <servers><server> |
| 54 | + <id>central</id> |
| 55 | + <username>${env.MVN_TOKEN_NAME}</username> |
| 56 | + <password>${env.MVN_TOKEN_PASSWORD}</password> |
| 57 | + </server></servers> |
| 58 | + </settings> |
| 59 | + EOF |
| 60 | +
|
| 61 | + - name: Import GPG signing key |
| 62 | + env: |
| 63 | + GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }} |
| 64 | + GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} |
| 65 | + run: echo "$GPG_SIGNING_KEY" | gpg --batch --yes --import --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" |
| 66 | + |
| 67 | + - name: Deploy to Maven Central staging |
| 68 | + env: |
| 69 | + MVN_TOKEN_NAME: ${{ secrets.MVN_TOKEN_NAME }} |
| 70 | + MVN_TOKEN_PASSWORD: ${{ secrets.MVN_TOKEN_PASSWORD }} |
| 71 | + GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }} |
| 72 | + GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} |
| 73 | + run: | |
| 74 | + mvn deploy -Drevision="${{ steps.v.outputs.version }}" -DskipTests \ |
| 75 | + -DaltDeploymentRepository=central::default::https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/ |
| 76 | +
|
| 77 | + - name: Transfer staged deployment to Central Portal |
| 78 | + env: |
| 79 | + MVN_TOKEN_NAME: ${{ secrets.MVN_TOKEN_NAME }} |
| 80 | + MVN_TOKEN_PASSWORD: ${{ secrets.MVN_TOKEN_PASSWORD }} |
| 81 | + run: | |
| 82 | + AUTH=$(echo -n "$MVN_TOKEN_NAME:$MVN_TOKEN_PASSWORD" | base64 | tr -d '\n') |
| 83 | + curl -sS -X POST -H "Authorization: Bearer $AUTH" \ |
| 84 | + "https://ossrh-staging-api.central.sonatype.com/manual/upload/defaultRepository/io.agntcy?publishing_type=automatic" |
0 commit comments