release.yml

name: Release to Maven Central

on:
  push:
    tags:
      - 'v*.*.*'

permissions:
  contents: write

jobs:
  release:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Validate release tag and Maven versions
        env:
          RELEASE_TAG: ${{ github.ref_name }}
        run: |
          set -euo pipefail
          if [[ ! "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
            echo "Release tag must match vX.Y.Z: $RELEASE_TAG" >&2
            exit 1
          fi
          expected_version="${RELEASE_TAG#v}"
          python3 - "$expected_version" <<'PY'
          import sys
          import xml.etree.ElementTree as ET

          expected = sys.argv[1]
          poms = [
              "pom.xml",
              "pgcache-core/pom.xml",
              "pgcache-spring/pom.xml",
              "pgcache-quarkus/pom.xml",
          ]

          mismatches = []
          for path in poms:
              project = ET.parse(path).getroot()
              namespace = {"m": project.tag.partition("}")[0].lstrip("{")}
              versions = [("project", project.findtext("m:version", namespaces=namespace))]
              if path != "pom.xml":
                  versions.append(("parent", project.findtext("m:parent/m:version", namespaces=namespace)))
              for location, actual in versions:
                  if actual != expected:
                      mismatches.append(f"{path} {location} version is {actual!r}, expected {expected!r}")

          if mismatches:
              raise SystemExit("Release version mismatch:\n" + "\n".join(mismatches))
          PY

      - name: Set up JDK 11
        uses: actions/setup-java@v5
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: maven
          server-id: central
          server-username: MAVEN_USERNAME
          server-password: MAVEN_PASSWORD
          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
          gpg-passphrase: GPG_PASSPHRASE

      - name: Build and Test
        run: mvn clean verify -B

      - name: Deploy to Maven Central
        run: mvn deploy -Prelease -B -DskipTests
        env:
          MAVEN_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          MAVEN_PASSWORD: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v3
        with:
          generate_release_notes: true
          files: |
            pgcache-core/target/*.jar
            pgcache-spring/target/*.jar
            pgcache-quarkus/target/*.jar