Setup release to maven central workflow

.github/workflows/build.yml

@@ -53,6 +53,7 @@ jobs:
  with:
  name: BUILD_FILES
  path: |
+ stylesniffer-report-aggregate/target
  stylesniffer-annotation-processor/target
  stylesniffer-api/target
  stylesniffer-impl/target

.github/workflows/release.yml

@@ -0,0 +1,38 @@
+name: Release
+on:
+ release:
+ types: [ created, published ]
+jobs:
+ publish:
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ packages: write
+ steps:
+ - uses: actions/checkout@v4
+ - name: Set up Java for publishing to Maven Central Repository
+ uses: actions/setup-java@v4
+ with:
+ java-version: '21'
+ distribution: 'temurin'
+ server-id: ossrh
+ server-username: MAVEN_USERNAME
+ server-password: MAVEN_PASSWORD
+ gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+ gpg-passphrase: GPG_PASSPHRASE # Env var that holds the key's passphrase
+ - if: github.event.release
+ name: Update version in pom.xml (Release only)
+ run: mvn -B versions:set -DnewVersion=${{ github.event.release.tag_name }} -DgenerateBackupPoms=false
+ - name: Publish to the Maven Central Repository
+ run: mvn --no-transfer-progress --batch-mode deploy -DperformRelease=true
+ env:
+ MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME_OSSRH }}
+ MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD_OSSRH }}
+ MAVEN_OPTS: "--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED"
+ GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+ - name: Discord notification
+ env:
+ DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
+ uses: Ilshidur/action-discord@master
+ with:
+ args: '{{ EVENT_PAYLOAD.repository.full_name }} version {{ EVENT_PAYLOAD.release.name }} is out!'

pom.xml

@@ -84,6 +84,8 @@
  <maven-license-plugin.version>4.5</maven-license-plugin.version>
  <maven-ayoy-license-verifier.version>1.2.0</maven-ayoy-license-verifier.version>
  <maven-sonar-plugin.version>4.0.0.4121</maven-sonar-plugin.version>
+ <maven-gpg-plugin.version>3.1.0</maven-gpg-plugin.version>
+ <maven-staging-plugin.version>1.7.0</maven-staging-plugin.version>
  </properties>
 
  <dependencyManagement>
@@ -163,6 +165,44 @@
  </dependencies>
  </dependencyManagement>
 
+ <profiles>
+ <profile>
+ <id>release-sign-artifacts</id>
+ <activation>
+ <property>
+ <name>performRelease</name>
+ <value>true</value>
+ </property>
+ </activation>
+ <build>
+ <plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-gpg-plugin</artifactId>
+ <version>${maven-gpg-plugin.version}</version>
+ <executions>
+ <execution>
+ <id>sign-artifacts</id>
+ <phase>verify</phase>
+ <goals>
+ <goal>sign</goal>
+ </goals>
+ <configuration>
+ <!-- This is required to make sure the plugin does not stop asking for -->
+ <!-- user input on the passphrase -->
+ <gpgArguments>
+ <arg>--pinentry-mode</arg>
+ <arg>loopback</arg>
+ </gpgArguments>
+ </configuration>
+ </execution>
+ </executions>
+ </plugin>
+ </plugins>
+ </build>
+ </profile>
+ </profiles>
+
  <build>
  <pluginManagement>
  <plugins>
@@ -174,7 +214,17 @@
  <release>${java.sdk.version}</release>
  </configuration>
  </plugin>
-
+ <plugin>
+ <groupId>org.sonatype.plugins</groupId>
+ <artifactId>nexus-staging-maven-plugin</artifactId>
+ <version>${maven-staging-plugin.version}</version>
+ <extensions>true</extensions>
+ <configuration>
+ <serverId>ossrh</serverId>
+ <nexusUrl>https://s01.oss.sonatype.org/</nexusUrl>
+ <autoReleaseAfterClose>true</autoReleaseAfterClose>
+ </configuration>
+ </plugin>
  <plugin>
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-surefire-plugin</artifactId>
@@ -185,12 +235,32 @@
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-source-plugin</artifactId>
  <version>${maven-source-plugin.version}</version>
+ <executions>
+ <execution>
+ <id>attach-sources</id>
+ <goals>
+ <goal>jar-no-fork</goal>
+ </goals>
+ </execution>
+ </executions>
  </plugin>
 
  <plugin>
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-javadoc-plugin</artifactId>
  <version>${maven-javadoc-plugin.version}</version>
+ <configuration>
+ <additionalOptions>-Xdoclint:none</additionalOptions>
+ <failOnError>false</failOnError>
+ </configuration>
+ <executions>
+ <execution>
+ <id>attach-javadocs</id>
+ <goals>
+ <goal>jar</goal>
+ </goals>
+ </execution>
+ </executions>
  </plugin>
 
  <plugin>
@@ -319,6 +389,14 @@
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-compiler-plugin</artifactId>
  </plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-gpg-plugin</artifactId>
+ </plugin>
+ <plugin>
+ <groupId>org.sonatype.plugins</groupId>
+ <artifactId>nexus-staging-maven-plugin</artifactId>
+ </plugin>
  <plugin>
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-surefire-plugin</artifactId>
@@ -354,4 +432,25 @@
  </plugin>
  </plugins>
  </build>
+
+ <repositories>
+ <repository>
+ <id>central</id>
+ <url>https://repo1.maven.org/maven2</url>
+ </repository>
+ </repositories>
+ <pluginRepositories>
+ <pluginRepository>
+ <id>mavencentral</id>
+ <name>Maven central</name>
+ <url>https://repo.maven.apache.org/maven2</url>
+ </pluginRepository>
+ </pluginRepositories>
+
+ <distributionManagement>
+ <snapshotRepository>
+ <id>ossrh</id>
+ <url>https://s01.oss.sonatype.org/content/repositories/snapshots</url>
+ </snapshotRepository>
+ </distributionManagement>
 </project>