release.yaml

name: release

on:
  pull_request:
    paths:
      - core/**
      - .github/workflows/release.yaml
      - gradle/**
      - '*.gradle'
  release:
    types:
      - created

env:
  GROOVY_SSH_VERSION: ${{ github.event.release.tag_name }}

jobs:
  publish:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: 11
      - uses: gradle/wrapper-validation-action@v3
      - uses: gradle/gradle-build-action@v2

      - run: ./gradlew sign
        env:
          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
          SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}

      - if: github.event_name == 'release'
        run: ./gradlew publish
        env:
          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
          SIGNING_PASSWORD: ${{ secrets.SIGNING_PASSWORD }}
          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}

  cli:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: 11
      - uses: gradle/wrapper-validation-action@v3
      - uses: gradle/gradle-build-action@v2
      - run: ./gradlew shadowJar
      - run: java -jar cli/build/libs/gssh.jar
      - run: sha256sum -b cli/build/libs/gssh.jar > cli/build/libs/gssh.jar.sha256
      - if: github.event_name == 'release'
        run: gh release upload '${{ github.event.release.tag_name }}' cli/build/libs/gssh.jar cli/build/libs/gssh.jar.sha256
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}