release: v1.2.0-alpha02 with read parity and safe alias/AAD handling … #14
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish to Maven Central | |
| on: | |
| push: | |
| tags: | |
| - 'v*' # triggers on v1.1.0, v2.0.0-beta01, etc. | |
| workflow_dispatch: | |
| jobs: | |
| publish: | |
| name: Publish SafeBox to Maven Central | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Inject secrets into gradle.properties | |
| run: | | |
| mkdir -p ~/.gradle | |
| echo "signing.keyId=${{ secrets.SIGNING_KEY_ID }}" >> ~/.gradle/gradle.properties | |
| echo "signing.password=${{ secrets.SIGNING_PASSWORD }}" >> ~/.gradle/gradle.properties | |
| echo "signing.secretKeyRingFile=/home/runner/.gnupg/secring.gpg" >> ~/.gradle/gradle.properties | |
| echo "mavenCentralUsername=${{ secrets.MAVEN_CENTRAL_USERNAME }}" >> ~/.gradle/gradle.properties | |
| echo "mavenCentralPassword=${{ secrets.MAVEN_CENTRAL_PASSWORD }}" >> ~/.gradle/gradle.properties | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: 'zulu' | |
| java-version: '17' | |
| - name: Set up Gradle | |
| uses: gradle/actions/setup-gradle@v4 | |
| - name: Prepare GPG directory | |
| run: mkdir -p /home/runner/.gnupg && chmod 700 /home/runner/.gnupg | |
| - name: Import GPG key | |
| run: echo "${{ secrets.SIGNING_SECRET_KEY_RING_BASE64 }}" | base64 -d > /home/runner/.gnupg/secring.gpg | |
| - name: Set GPG key file permissions | |
| run: chmod 600 /home/runner/.gnupg/secring.gpg | |
| - name: Print release version | |
| run: ./gradlew properties | grep version | |
| - name: Publish to Maven Central | |
| run: ./gradlew publishToMavenCentral --no-configuration-cache --stacktrace |