release.yml

name: Release to Maven Central

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5

      - name: Set up JDK 8
        uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: '8'

      - name: Verify tag matches POM version
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          TAG_VERSION="${GITHUB_REF_NAME#v}"
          POM_VERSION="$(mvn -q help:evaluate -Dexpression=project.version -DforceStdout)"
          if [ "$TAG_VERSION" != "$POM_VERSION" ]; then
            echo "::error::tag ${GITHUB_REF_NAME} does not match POM version ${POM_VERSION}"
            exit 1
          fi
          echo "Tag and POM version match: ${POM_VERSION}"

      - name: Import GPG key
        env:
          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
        run: |
          echo "$GPG_PRIVATE_KEY" | gpg --batch --import

      - name: Configure Maven settings
        env:
          CENTRAL_TOKEN_USERNAME: ${{ secrets.CENTRAL_TOKEN_USERNAME }}
          CENTRAL_TOKEN_PASSWORD: ${{ secrets.CENTRAL_TOKEN_PASSWORD }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
        run: |
          mkdir -p ~/.m2
          cat > ~/.m2/settings.xml <<EOF
          <settings>
            <servers>
              <server>
                <id>central</id>
                <username>${CENTRAL_TOKEN_USERNAME}</username>
                <password>${CENTRAL_TOKEN_PASSWORD}</password>
              </server>
              <server>
                <id>D7771F55ED62AAC7162CFDE833B20E4440CDF36D</id>
                <passphrase>${GPG_PASSPHRASE}</passphrase>
              </server>
            </servers>
          </settings>
          EOF

      - name: Publish to Maven Central
        run: mvn --batch-mode clean deploy