Publish packages to sonatype #75
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Create release and publish packages to Sonatype" | |
| on: | |
| pull_request: | |
| types: [opened, edited, synchronize] | |
| #on: | |
| # push: | |
| # branches: | |
| # - main | |
| permissions: | |
| id-token: write | |
| contents: write | |
| jobs: | |
| check-for-release-file: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| has-release: ${{ steps.check-for-release-file.outputs.has-release }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Check for RELEASE.md file | |
| id: check-for-release-file | |
| run: | | |
| if [ ! -f ./RELEASE.md ]; then | |
| echo "has-release=false" >> $GITHUB_OUTPUT | |
| echo "No release detected. Exiting." | |
| exit 0 | |
| fi | |
| echo "has-release=true" >> $GITHUB_OUTPUT | |
| create-release: | |
| runs-on: ubuntu-latest | |
| needs: check-for-release-file | |
| if: needs.check-for-release-file.outputs.has-release == 'true' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Update CHANGELOG.md and build.sbt | |
| run: | | |
| git fetch --tags | |
| LATEST_TAG=$(git describe --tags $(git rev-list --tags --max-count=1)) | |
| python3 .github/scripts/create_release.py ${LATEST_TAG} $(pwd) | |
| # - name: Commit and push changes | |
| # run: | | |
| # NEW_TAG=$(cat CHANGELOG.md | grep -m1 -o 'v[0-9]\+\.[0-9]\+\.[0-9]\+') | |
| # | |
| # git config --global user.name "GitHub on behalf of Wellcome Collection" | |
| # git config --global user.email "[email protected]" | |
| # | |
| # git checkout Publish-packages-to-sonatype | |
| # git pull | |
| # | |
| # git add CHANGELOG.md build.sbt | |
| # git rm RELEASE.md | |
| # git commit -m "$(printf "Release: Bump version to ${NEW_TAG}\n\n[skip ci]")" | |
| # git tag "test-${NEW_TAG}" | |
| # git push origin Publish-packages-to-sonatype | |
| # git push origin --tags | |
| publish: | |
| runs-on: ubuntu-latest | |
| needs: [create-release, check-for-release-file] | |
| if: needs.check-for-release-file.outputs.has-release == 'true' | |
| strategy: | |
| matrix: | |
| service: | |
| - http | |
| - fixtures | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: Publish-packages-to-sonatype # Important! | |
| - name: Set up GPG | |
| run: | | |
| echo "${{ secrets.BASE64_GPG_KEY }}" | base64 -d > secret-keys.gpg | |
| echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --import secret-keys.gpg | |
| rm secret-keys.gpg | |
| - name: Set up Sonatype credentials | |
| run: | | |
| mkdir ~/.sbt | |
| echo "${{ secrets.SONATYPE_CREDENTIALS }}" > ~/.sbt/sonatype.credentials | |
| - name: Setup JDK | |
| uses: actions/setup-java@v3 | |
| with: | |
| distribution: temurin | |
| java-version: 8 | |
| cache: sbt | |
| - name: Publish to Sonatype | |
| run: | | |
| PGP_PASSPHRASE=${{ secrets.GPG_PASSPHRASE }} sbt "project ${{ matrix.service }}" publishSigned | |
| sbt "project ${{ matrix.service }}" sonatypeBundleRelease |