release_maven.yml

# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-maven

name: Release Build

on:
  push:
    branches:
    - main

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Set up JDK 17
      uses: actions/setup-java@v3
      with:
        java-version: '17'
        distribution: 'adopt'
        cache: maven
    - name: Set up Maven 3.9.4
      uses: stCarolas/setup-maven@v4.5
      with:
        maven-version: 3.9.4
    - name: Build and Deploy with Maven
      run: |
        git config --global user.email "info@funfried.de"
        git config --global user.name "funfried"
        echo ${{ secrets.GPG_SIGNING_SECRET_KEY }} | base64 --decode | gpg --batch --import
        echo ${{ secrets.GPG_SIGNING_OWNERTRUST }} | base64 --decode | gpg --import-ownertrust
        mvn -s .ci.settings.xml --no-transfer-progress -Prelease-commons,sonatype-oss-release deploy
        mvn -s .ci.settings.xml --no-transfer-progress -Prelease-commons,github clean deploy
      env:
        GPG_TTY: $(tty)
        MAVEN_OPTS: -Xms128m -Xmx512m -Djansi.force=true --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED
        gh_username: ${{ secrets.GH_USERNAME }}
        gh_token: ${{ secrets.GH_TOKEN }}
        sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
        sonatype_password: ${{ secrets.SONATYPE_PASSWORD }}
        signing_keypass: ${{ secrets.GPG_PASSPHRASE }}
        skipRemoteStaging: ${{ secrets.SKIP_REMOTE_STAGING }}