Publish packages to sonatype #77
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Create release and publish packages to Sonatype" | |
| on: | |
| pull_request: | |
| types: [opened, edited, synchronize] | |
| #on: | |
| # push: | |
| # branches: | |
| # - main | |
| permissions: | |
| id-token: write | |
| contents: write | |
| jobs: | |
| # First, check if there is a RELEASE.md file in the root of the repository. | |
| # If not, no release will be created and subsequent steps and jobs will be skipped. | |
| check-for-release-file: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| has-release: ${{ steps.check-for-release-file.outputs.has-release }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Check for RELEASE.md file | |
| id: check-for-release-file | |
| run: | | |
| if [ ! -f ./RELEASE.md ]; then | |
| echo "has-release=false" >> $GITHUB_OUTPUT | |
| echo "No release detected. Exiting." | |
| exit 0 | |
| fi | |
| echo "has-release=true" >> $GITHUB_OUTPUT | |
| # Creating a release involves the following two changes: | |
| # - Updating the CHANGELOG.md file with the contents of the RELEASE.md file | |
| # - Bumping the version number in the build.sbt file | |
| # Once these changes are made, they are pushed to the main branch | |
| create-release: | |
| runs-on: ubuntu-latest | |
| needs: check-for-release-file | |
| if: needs.check-for-release-file.outputs.has-release == 'true' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Update CHANGELOG.md and build.sbt | |
| run: | | |
| git fetch --tags | |
| LATEST_TAG=$(git describe --tags $(git rev-list --tags --max-count=1)) | |
| python3 .github/scripts/create_release.py ${LATEST_TAG} $(pwd) | |
| - name: Commit and push changes | |
| run: | | |
| NEW_TAG=$(cat CHANGELOG.md | grep -m1 -o 'v[0-9]\+\.[0-9]\+\.[0-9]\+') | |
| git config --global user.name "GitHub on behalf of Wellcome Collection" | |
| git config --global user.email "[email protected]" | |
| git checkout Publish-packages-to-sonatype | |
| git pull | |
| git add CHANGELOG.md build.sbt | |
| git rm RELEASE.md | |
| git commit -m "$(printf "Release: Bump version to ${NEW_TAG}\n\n[skip ci]")" | |
| git tag "test-${NEW_TAG}" | |
| git push origin Publish-packages-to-sonatype | |
| git push origin --tags | |
| # All sbt projects are published to Sonatype (https://central.sonatype.com/namespace/org.wellcomecollection). | |
| # Publishing involves several steps: | |
| # - Configuring a GPG key so that the packages can be signed | |
| # - Configuring Sonatype credentials | |
| # - Publishing the packages to a local staging repository using the sbt-sonatype plugin | |
| # - Releasing the published bundle to Sonatype | |
| publish: | |
| runs-on: ubuntu-latest | |
| needs: [create-release, check-for-release-file] | |
| if: needs.check-for-release-file.outputs.has-release == 'true' | |
| strategy: | |
| matrix: | |
| service: | |
| - fixtures | |
| - http | |
| - json | |
| - typesafe_app | |
| - monitoring | |
| - monitoring_typesafe | |
| - messaging | |
| - messaging_typesafe | |
| - storage | |
| - storage_typesafe | |
| - elasticsearch | |
| - elasticsearch_typesafe | |
| - sierra | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| ref: Publish-packages-to-sonatype | |
| - name: Set up GPG | |
| run: | | |
| echo "${{ secrets.BASE64_GPG_KEY }}" | base64 -d > secret-keys.gpg | |
| echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --import secret-keys.gpg | |
| rm secret-keys.gpg | |
| - name: Set up Sonatype credentials | |
| run: | | |
| mkdir ~/.sbt | |
| echo "${{ secrets.SONATYPE_CREDENTIALS }}" > ~/.sbt/sonatype.credentials | |
| - name: Setup JDK | |
| uses: actions/setup-java@v3 | |
| with: | |
| distribution: temurin | |
| java-version: 17 | |
| cache: sbt | |
| - name: Publish to Sonatype | |
| run: | | |
| PGP_PASSPHRASE=${{ secrets.GPG_PASSPHRASE }} sbt "project ${{ matrix.service }}" publishSigned | |
| sbt "project ${{ matrix.service }}" sonatypeBundleRelease |