|
| 1 | +name: Publish to Maven Central |
| 2 | + |
| 3 | +on: |
| 4 | + push: |
| 5 | + tags: |
| 6 | + - 'v*' |
| 7 | + branches: |
| 8 | + - 'feature/release-*' |
| 9 | + |
| 10 | +jobs: |
| 11 | + publish: |
| 12 | + runs-on: ubuntu-latest |
| 13 | + steps: |
| 14 | + - name: Checkout code |
| 15 | + uses: actions/checkout@v4 |
| 16 | + with: |
| 17 | + fetch-depth: 0 |
| 18 | + |
| 19 | + - name: Set up JDK 8 |
| 20 | + uses: actions/setup-java@v4 |
| 21 | + with: |
| 22 | + java-version: '8' |
| 23 | + distribution: 'temurin' |
| 24 | + cache: maven |
| 25 | + |
| 26 | + - name: Setup GPG |
| 27 | + run: | |
| 28 | + echo "Setting up GPG..." |
| 29 | + mkdir -p ~/.gnupg |
| 30 | + chmod 700 ~/.gnupg |
| 31 | +
|
| 32 | + echo "${{ secrets.GPG_PRIVATE_KEY }}" > private.key |
| 33 | + echo "Importing GPG key..." |
| 34 | + gpg --batch --import private.key |
| 35 | + rm private.key |
| 36 | +
|
| 37 | + echo "Configuring GPG..." |
| 38 | + cat > ~/.gnupg/gpg.conf << EOF |
| 39 | + default-key ${{ secrets.GPG_KEYNAME }} |
| 40 | + use-agent |
| 41 | + pinentry-mode loopback |
| 42 | + EOF |
| 43 | +
|
| 44 | + echo "=== GPG Keys ===" |
| 45 | + gpg --list-secret-keys --keyid-format LONG |
| 46 | + gpg --list-keys --keyid-format LONG |
| 47 | +
|
| 48 | + - name: Configure Maven |
| 49 | + run: | |
| 50 | + mkdir -p ~/.m2 |
| 51 | + cat > ~/.m2/settings.xml << EOF |
| 52 | + <settings> |
| 53 | + <servers> |
| 54 | + <server> |
| 55 | + <id>central</id> |
| 56 | + <username>${{ secrets.OSSRH_USERNAME_TOKEN }}</username> |
| 57 | + <password>${{ secrets.OSSRH_PASSWORD_TOKEN }}</password> |
| 58 | + </server> |
| 59 | + </servers> |
| 60 | + <profiles> |
| 61 | + <profile> |
| 62 | + <id>central</id> |
| 63 | + <activation> |
| 64 | + <activeByDefault>true</activeByDefault> |
| 65 | + </activation> |
| 66 | + <properties> |
| 67 | + <gpg.executable>gpg</gpg.executable> |
| 68 | + <gpg.passphrase>${{ secrets.GPG_PASSPHRASE }}</gpg.passphrase> |
| 69 | + </properties> |
| 70 | + </profile> |
| 71 | + </profiles> |
| 72 | + </settings> |
| 73 | + EOF |
| 74 | +
|
| 75 | + - name: Build and Publish |
| 76 | + env: |
| 77 | + OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME_TOKEN }} |
| 78 | + OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD_TOKEN }} |
| 79 | + GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} |
| 80 | + run: | |
| 81 | + echo "Starting Maven build and deploy..." |
| 82 | + mvn clean deploy -P release \ |
| 83 | + -Dmaven.javadoc.skip=false \ |
| 84 | + -Dmaven.deploy.skip=false \ |
| 85 | + -Dgpg.keyname=${{ secrets.GPG_KEYNAME }} \ |
| 86 | + -Dgpg.useagent=true \ |
| 87 | + -Dmaven.test.failure.ignore=false \ |
| 88 | + -DaltDeploymentRepository=ossrh::default::https://central.sonatype.com/api/v1/publisher/upload \ |
| 89 | + -DrepositoryId=ossrh \ |
| 90 | + -Dusername=${{ secrets.OSSRH_USERNAME_TOKEN }} \ |
| 91 | + -Dpassword=${{ secrets.OSSRH_PASSWORD_TOKEN }} |
0 commit comments