release.yml

name: Release
on:
  milestone:
    types: [closed]
jobs:
  release:
    name: Release ${{ github.event.milestone.title }}
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v5
        with:
          ref: master
          fetch-depth: 0
      - name: Validate Gradle Wrapper
        uses: gradle/actions/wrapper-validation@v5
      - name: Set up Git
        run: |
          git config user.name "Zonky Bot"
          git config user.email "bot@zonky.com"
      - name: Set up JDK 17
        uses: actions/setup-java@v5
        with:
          distribution: 'zulu'
          java-version: '17'
          cache: 'gradle'
      - name: Make Gradle wrapper executable
        run: chmod +x gradlew
      - name: Publish to Maven Central via Gradle
        env:
          RELEASE_VERSION: ${{ github.event.milestone.title }}
          # Gradle signing plugin (build.gradle.kts)
          MAVEN_SIGNING_KEY: ${{ secrets.SIGNING_CERT }}
          MAVEN_SIGNING_PASSPHRASE: ${{ secrets.SIGNING_PASS }}
          # nmcp credentials (build.gradle.kts)
          USERNAME_TOKEN: ${{ secrets.MAVEN_USER }}
          PASSWORD_TOKEN: ${{ secrets.MAVEN_PASS }}
        # Use the milestone title as the build's version without touching gradle.properties
        run: |
          ./gradlew \
            -Pversion=$RELEASE_VERSION \
            clean check publishAllPublicationsToCentralPortal \
            --stacktrace
      # Reproduces Maven Release Plugin’s v@{project.version} tag
      - name: Tag release
        if: success()
        env:
          RELEASE_VERSION: ${{ github.event.milestone.title }}
        run: |
          git tag "v$RELEASE_VERSION"
          git push origin "v$RELEASE_VERSION"