feat(ci): add GitHub Actions workflow for release automation

- Introduced `.github/workflows/release.yml` for automated release workflow on `master` branch.
- Removed sensitive logging from Gradle build script.

Author: CoderYellow

.github/workflows/release.yml

@@ -0,0 +1,91 @@
+name: Release
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  packages: write
+
+concurrency:
+  group: release-master
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    env:
+      CLOUDERA_HMS_BASE_IMAGE: ghcr.io/openprojectx/postgres14-jdk17:latest
+      CLOUDERA_HMS_IMAGE: ghcr.io/openprojectx/cloudera-hms
+      GRADLE_OPTS: -Dorg.gradle.daemon=false
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@v4
+        with:
+          cache-read-only: false
+
+      - name: Cache Jib
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/google-cloud-tools-java/jib
+            ~/.jib-cache
+          key: ${{ runner.os }}-jib-${{ hashFiles('**/*.gradle.kts', '**/gradle.properties', 'gradle/libs.versions.toml') }}
+          restore-keys: |
+            ${{ runner.os }}-jib-
+
+      - name: Configure git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Verify Docker environment
+        run: |
+          docker version
+          docker info
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Write signing key
+        env:
+          SIGNING_KEY_ASC: ${{ secrets.SIGNING_KEY_ASC }}
+        run: |
+          printf '%s' "$SIGNING_KEY_ASC" > "$RUNNER_TEMP/signing-key.asc"
+
+      - name: Run Testcontainers verification
+        env:
+          CLOUDERA_HMS_IMAGE: cloudera-hms:test
+          CLOUDERA_HMS_TEST_IMAGE: cloudera-hms:test
+        run: |
+          ./gradlew :testcontainers:test
+
+      - name: Run release
+        env:
+          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
+          SIGNING_KEY_FILE: ${{ runner.temp }}/signing-key.asc
+          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
+        run: |
+          ./gradlew  release

build.gradle.kts

@@ -112,10 +112,7 @@ nexusPublishing {
             nexusUrl.set(uri("https://ossrh-staging-api.central.sonatype.com/service/local/"))
             snapshotRepositoryUrl.set(uri("https://central.sonatype.com/repository/maven-snapshots/"))
             username.set(System.getenv("OSSRH_USERNAME"))
-            logger.info("using username: ${System.getenv("OSSRH_USERNAME")}")
-
             password.set(System.getenv("OSSRH_PASSWORD"))
-            logger.info("using password: ${System.getenv("OSSRH_PASSWORD")}")
 
         }
     }