Release.yaml

name: Release to Maven Central

on:
  release:
    types: [published]

permissions:
  contents: read

concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false

jobs:
  release:
    runs-on: ubuntu-latest
    env:
      SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
      SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

    steps:
      - uses: actions/checkout@v6

      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          java-version: "21"
          distribution: "temurin"

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v5
        with:
          gradle-version: "9.2.1"

      - name: Generate Gradle wrapper
        run: gradle wrapper

      - name: Extract version from tag
        id: version
        shell: bash
        run: |
          set -euo pipefail
          # Remove 'v' prefix if present (v0.2.3 -> 0.2.3)
          VERSION="${GITHUB_REF_NAME#v}"
          echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
          echo "Release version: $VERSION"

      - name: Fail if SNAPSHOT tag
        shell: bash
        run: |
          set -euo pipefail
          VERSION="${{ steps.version.outputs.VERSION }}"
          if [[ "$VERSION" == *-SNAPSHOT ]]; then
            echo "::error::Refusing to publish SNAPSHOT version '$VERSION' with the release workflow."
            echo "::error::Create a non-SNAPSHOT release tag (e.g., v0.1.5) for Maven Central releases."
            echo "::error::For snapshots, push a -SNAPSHOT version on main and publish via publishAllPublicationsToCentralPortalSnapshots."
            exit 1
          fi

      - name: Build and test
        run: ./gradlew build -Pversion=${{ steps.version.outputs.VERSION }}

      - name: Deploy to Maven Central
        run: ./gradlew publishAllPublicationsToCentralPortal -Pversion=${{ steps.version.outputs.VERSION }}