release.yml

name: Publish a release

on:
  release:
    types: [published]

env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

jobs:
  publish_release:
    name: Publish release to Sonatype
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2

      - name: Setup Java and Scala
        uses: olafurpg/setup-scala@v10
        with:
          java-version: adopt@1.8

      - name: Cache sbt
        uses: actions/cache@v2
        with:
          path: |
            ~/.sbt
            ~/.ivy2/cache
            ~/.coursier/cache/v1
            ~/.cache/coursier/v1
            ~/AppData/Local/Coursier/Cache/v1
            ~/Library/Caches/Coursier/v1
          key: ${{ runner.os }}-sbt-cache-v2-${{ hashFiles('**/*.sbt') }}-${{ hashFiles('project/build.properties') }}

      - name: Setup NPM
        uses: actions/setup-node@v3
        with:
          node-version: 20
          registry-url: https://registry.npmjs.org/
          cache: npm
          cache-dependency-path: ./sigma-js/package-lock.json

      - name: Install NPM dependencies
        run: npm ci --prefix sigma-js
        # Ensure latest npm version to be installed for npm provenance support
      - run: npm install -g npm

      - name: Import GPG key
        run: ci/import_gpg.sh
        env:
          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}

      - name: Publish release ${{ github.ref }}
        run: sbt +publishSigned sonatypeBundleRelease
        env:
          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}

      - name: JS Build
        run: sbt -jvm-opts ci/ci.jvmopts scJS/fastOptJS

      - name: Publish JS snapshot ${{ github.ref }}
        run: npm publish --provenance
        working-directory: ./sigma-js
        env:
          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}