sdk/.github/workflows/java.yml at main · tesote/sdk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
name: java

on:
  push:
    branches: [main]
    paths:
      - 'packages/java/**'
      - 'spec/**'
      - '.github/workflows/java.yml'
  pull_request:
    branches: [main]
    paths:
      - 'packages/java/**'
      - 'spec/**'
      - '.github/workflows/java.yml'

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"

permissions:
  contents: read

jobs:
  test:
    runs-on: blacksmith-2vcpu-ubuntu-2204
    strategy:
      fail-fast: false
      matrix:
        java: ['17', '21']
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: ${{ matrix.java }}
      - name: gradle test
        working-directory: packages/java
        run: ./gradlew test --no-daemon

  release:
    needs: test
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    runs-on: blacksmith-2vcpu-ubuntu-2204
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '21'
      - name: gate on version
        id: gate
        working-directory: packages/java
        run: |
          set -euo pipefail
          version="$(grep -E '^version = ' build.gradle.kts | sed -E 's/.*"([^"]+)".*/\1/')"
          tag="java-v$version"
          release=true
          if git -C "$GITHUB_WORKSPACE" ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
            echo "tag $tag already exists; skipping release."
            release=false
          elif grep -qE "^## ${version} - unreleased" CHANGELOG.md; then
            echo "CHANGELOG marks ${version} as unreleased; skipping publish."
            release=false
          fi
          echo "release=$release" >> "$GITHUB_OUTPUT"
          echo "version=$version" >> "$GITHUB_OUTPUT"
          echo "tag=$tag" >> "$GITHUB_OUTPUT"
      - if: steps.gate.outputs.release == 'true'
        name: publish to Sonatype Central Portal
        working-directory: packages/java
        env:
          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
          MAVEN_GPG_KEY: ${{ secrets.MAVEN_GPG_KEY }}
          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
        run: ./gradlew publishMavenPublicationToCentralPortal --no-daemon
      - if: steps.gate.outputs.release == 'true'
        name: tag and GitHub release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          tag="${{ steps.gate.outputs.tag }}"
          git tag "$tag"
          git push origin "$tag"
          gh release create "$tag" \
            --title "Java SDK ${{ steps.gate.outputs.version }}" \
            --generate-notes