Merge pull request #40 from levigo/fix/JWT-4269_narrow_fetch_depth_to… #42
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Continuous Delivery | |
| on: | |
| push: | |
| branches: | |
| - 'maintenance/maint-1x' | |
| paths-ignore: | |
| # - '.github/**' | |
| - '**/README.md' | |
| env: | |
| # This will suppress any download for dependencies and plugins or upload messages which would clutter the console log. | |
| # `showDateTime` will show the passed time in milliseconds. You need to specify `--batch-mode` to make this work. | |
| MAVEN_OPTS: "-Dhttps.protocols=TLSv1.2 -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=WARN -Dorg.slf4j.simpleLogger.showDateTime=true -Djava.awt.headless=true" | |
| # As of Maven 3.3.0 instead of this you may define these options in `.mvn/maven.config` so the same config is used | |
| # when running from the command line. | |
| # `installAtEnd` and `deployAtEnd` are only effective with recent version of the corresponding plugins. | |
| MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version -DinstallAtEnd=true -DdeployAtEnd=true" | |
| # The maintenance git tag prefix | |
| JWT_TAG_PREFIX: 'maintenance_1_x-' | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-tags: true | |
| fetch-depth: 10 | |
| - name: Bump version and create tag | |
| id: semantic_version | |
| uses: mathieudutour/github-tag-action@v6.1 | |
| with: | |
| release_branches: maintenance/maint-1x | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| tag_prefix: ${{ env.JWT_TAG_PREFIX }} | |
| - name: Verify and print new build number | |
| run: | | |
| if echo '${{ steps.semanticversion.outputs.new_tag }}' |grep -Eq '^${{ env.JWT_TAG_PREFIX }}1[.][0-9]+[.][0-9]+$'; then | |
| echo Tag '${{ steps.semanticversion.outputs.new_tag }}', New version '${{ steps.semanticversion.outputs.new_version }}', Changelog '${{ steps.semanticversion.outputs.changelog }}' | |
| else | |
| echo 'unexpected tag format - aborting' | |
| exit -1 | |
| fi | |
| ## Configure JDK 11 | |
| - name: Set up JDK 11 | |
| uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '11' | |
| cache: 'maven' | |
| ## Build with maven | |
| - name: Prepare maven settings | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| mkdir -p ~/.m2 | |
| echo "<settings><servers><server><id>github</id><username>x-access-token</username><password>${GITHUB_TOKEN}</password></server></servers></settings>" > ~/.m2/settings.xml | |
| - name: Set version | |
| id: version | |
| run: | | |
| echo Releasing as ${{ steps.semanticversion.outputs.new_version }} | |
| mvn $MAVEN_CLI_OPTS versions:set -DnewVersion=${{ steps.semanticversion.outputs.new_version }} | |
| - name: Perform build | |
| run: mvn $MAVEN_CLI_OPTS package | |
| ## Deploy | |
| - name: Deploy package | |
| env: | |
| GPG_EXECUTABLE: gpg | |
| GPG_SECRET_KEYS: ${{ secrets.LEVIGO_GPG_KEYS }} | |
| GPG_OWNERTRUST: ${{ secrets.LEVIGO_GPG_OWNERTRUST }} | |
| GPG_PASSPHRASE: ${{ secrets.LEVIGO_GPG_PASSPHRASE }} | |
| SONATYPE_USERNAME: ${{ secrets.LEVIGO_SONATYPE_USERNAME }} | |
| SONATYPE_PASSWORD: ${{ secrets.LEVIGO_SONATYPE_PASSWORD }} | |
| run: | | |
| echo "$GPG_SECRET_KEYS" | base64 --decode | $GPG_EXECUTABLE --import --no-tty --batch --yes | |
| echo "$GPG_OWNERTRUST" | base64 --decode | $GPG_EXECUTABLE --import-ownertrust --no-tty --batch --yes | |
| mvn $MAVEN_CLI_OPTS deploy --settings .github/settings.xml -Dmaven.test.skip.exec=true -U -Prelease | |
| ## Update README.md | |
| - name: Edit README.md to contain version number | |
| run: | | |
| git config --local user.email "action@github.com" | |
| git config --local user.name "GitHub Action" | |
| git checkout master | |
| git reset --hard HEAD | |
| sed -ri "s,<version>.*</version>,<version>${{ steps.semanticversion.outputs.new_version }}</version>," README.md | |
| sed -ri "s,version-[0-9a-z.]+-,version-${{ steps.semanticversion.outputs.new_version }}-," README.md | |
| sed -ri "s,gwt-spring-boot-starter/tree/[0-9a-z.]+,gwt-spring-boot-starter/tree/${{ steps.semanticversion.outputs.new_tag }}," README.md | |
| git add README.md | |
| git commit -m "Edit README.md to contain correct version" | |
| - name: Push changes | |
| uses: ad-m/github-push-action@master | |
| with: | |
| branch: master | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create Release | |
| id: create_release | |
| uses: actions/create-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| tag_name: ${{ steps.semanticversion.outputs.new_version }} | |
| release_name: Release ${{ steps.semanticversion.outputs.new_version }} | |
| ## Notify Slack | |
| - name: Notify slack | |
| uses: hennejg/slack-build-notifier@v1.1 | |
| with: | |
| username: GitHub | |
| icon_emoji: octocat | |
| text: Released new version `${{ steps.semanticversion.outputs.new_version }}` of *${{ github.repository }}* to maven central | |
| channel: ci_jwt | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} |