release.yml

name: Release to OSSRH Sonatype
on:
  push:
    tags:
      - 'v*'

jobs:
  gradle-wrapper-validation:
    name: Validate Gradle Wrapper
    runs-on: ubuntu-latest
    steps:
      - name: Fetch sources
        uses: actions/checkout@v2

      - name: Validate Gradle Wrapper
        uses: gradle/wrapper-validation-action@v1

  release:
    name: Release to Sonatype OSSRH
    needs: gradle-wrapper-validation
    runs-on: ubuntu-latest
    steps:
      - name: Fetch sources
        uses: actions/checkout@v2

      - name: Setup Java
        uses: actions/setup-java@v1
        with:
          java-version: 11

      - name: Setup Gradle Wrapper cache
        uses: actions/cache@v2
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}
          restore-keys: ${{ runner.os }}-gradle

      - name: Setting GPG key
        run: |
          echo "${{secrets.SIGNING_SECRET_KEY_RING_CONTENT}}" | base64 -d > ringkey.gpg
          gpg --quiet --batch --yes --decrypt --passphrase="${{secrets.SECRET_PASSPHRASE}}" --output secring.gpg ringkey.gpg

      - name: Release to OSSRH Staging repository
        run: |
          ./gradlew publish -Psigning.keyId=${{secrets.SIGNING_KEY_ID}} \
                            -Psigning.password=${{secrets.SIGNING_PASSWORD}} \
                            -Psigning.secretKeyRingFile=secring.gpg \
                            -PossrhUsername=${{secrets.OSSRH_USERNAME}} \
                            -PossrhPassword=${{secrets.OSSRH_PASSWORD}} \
                            -Prelease

      - name: Post Setting GPG key
        run: rm -rf *.gpg