chore: fix publish (#618)

Author: tkrs

.github/workflows/publish.yml

@@ -0,0 +1,25 @@
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+name: publish
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: maven
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          java-version: "11"
+          distribution: "temurin"
+          cache: "sbt"
+      - uses: sbt/setup-sbt@v1
+      - run: sbt ci-release
+        env:
+          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
+          PGP_SECRET: ${{ secrets.PGP_SECRET }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}

.github/workflows/release-please.yml

@@ -3,39 +3,19 @@ on:
     branches:
       - master
 
-permissions:
-  contents: write
-  pull-requests: write
-  issues: write
-
 name: release-please
 
 jobs:
   release-please:
     runs-on: ubuntu-latest
-    outputs:
-      release_created: ${{ steps.release.outputs.release_created }}
     steps:
+      - name: Generate github app token
+        id: generate_token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
       - uses: googleapis/release-please-action@v4
-        id: release
         with:
+          token: ${{ steps.generate_token.outputs.token }}
           release-type: simple
-  publish:
-    runs-on: ubuntu-latest
-    environment: production
-    needs: release-please
-    if: ${{ needs.release-please.outputs.release_created }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
-        with:
-          java-version: "11"
-          distribution: "temurin"
-          cache: "sbt"
-      - uses: sbt/setup-sbt@v1
-      - run: sbt ci-release
-        env:
-          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
-          PGP_SECRET: ${{ secrets.PGP_SECRET }}
-          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
-          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}