ec-microservice-commons/.github/workflows/build-and-publish-release.yml

name: RELEASE - Build and Publish Maven Artifacts

on:
  workflow_dispatch:
  push:
    branches:
      - main

env:
  NEXUS_USERNAME: 'edward'
  NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
  MAVEN_PUBLIC_REPOSITORY_URL: ${{ secrets.MAVEN_PUBLIC_REPOSITORY_URL }}
  SNAPSHOT_DEPLOYMENT_REPOSITORY_URL: ${{ secrets.SNAPSHOT_DEPLOYMENT_REPOSITORY_URL }}
  RELEASE_DEPLOYMENT_REPOSITORY_URL: ${{ secrets.RELEASE_DEPLOYMENT_REPOSITORY_URL }}

jobs:
  sonarqube-test:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: write
      packages: write
    name: Run Sonarqube Tests
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
      - uses: actions/setup-java@v4.2.2
        if: ${{ hashFiles('**/pom.xml') }}
        with:
          java-version: 17
          distribution: zulu
          cache: 'maven'
      - name: Cache SonarQube packages
        uses: actions/cache@v4
        with:
          path: ~/.sonar/cache
          key: ${{ runner.os }}-sonar
          restore-keys: ${{ runner.os }}-sonar
      - name: Cache Maven packages
        uses: actions/cache@v4
        with:
          path: ~/.m2
          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
          restore-keys: ${{ runner.os }}-m2
      - name: maven-settings-xml-action
        uses: whelk-io/maven-settings-xml-action@v22
        with:
          profiles: >
            [{
              "id": "homelab",
              "properties": {
                "altSnapshotDeploymentRepository": "nexus-snapshot::${env.SNAPSHOT_DEPLOYMENT_REPOSITORY_URL}",
                "altReleaseDeploymentRepository": "nexus-release::${env.RELEASE_DEPLOYMENT_REPOSITORY_URL}"
              }
            }]
          repositories: >
            [{
              "id": "maven-public",
              "url": "${env.MAVEN_PUBLIC_REPOSITORY_URL}",
              "snapshots": {
                "enabled": "true"
              }
            }]
          servers: >
            [{
              "id": "nexus-snapshot",
              "username": "${env.NEXUS_USERNAME}",
              "password": "${env.NEXUS_PASSWORD}"
            },
            {
              "id": "nexus-release",
              "username": "${env.NEXUS_USERNAME}",
              "password": "${env.NEXUS_PASSWORD}"
            }]
      - name: Build and analyse
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
        run: mvn -B verify org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=ec-microservice-commons -Dsonar.projectName='ec-microservice-commons' -P homelab
  build-java:
    runs-on: ubuntu-latest
    needs:
      - sonarqube-test
    permissions:
      id-token: write
      contents: write
      packages: write
    name: Build Java Package and Publish
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: actions/setup-java@v4.2.2
        if: ${{ hashFiles('**/pom.xml') }}
        with:
          java-version: 17
          distribution: zulu
          cache: 'maven'
      - name: maven-settings-xml-action
        uses: whelk-io/maven-settings-xml-action@v22
        with:
          profiles: >
            [{
              "id": "homelab",
              "properties": {
                "altSnapshotDeploymentRepository": "nexus-snapshot::${env.SNAPSHOT_DEPLOYMENT_REPOSITORY_URL}",
                "altReleaseDeploymentRepository": "nexus-release::${env.RELEASE_DEPLOYMENT_REPOSITORY_URL}"
              }
            }]
          repositories: >
            [{
              "id": "maven-public",
              "url": "${env.MAVEN_PUBLIC_REPOSITORY_URL}",
              "snapshots": {
                "enabled": "true"
              }
            }]
          servers: >
            [{
              "id": "nexus-snapshot",
              "username": "${env.NEXUS_USERNAME}",
              "password": "${env.NEXUS_PASSWORD}"
            },
            {
              "id": "nexus-release",
              "username": "${env.NEXUS_USERNAME}",
              "password": "${env.NEXUS_PASSWORD}"
            }]
      - name: Config Git
        run: |
          git config --global user.email "edward@cheng.sydney"
          git config --global user.name "3dwardch3ng"
          git config --global core.autocrlf input
      - name: Start release
        run: |
          mvn gitflow:release-start -B -DpushRemote=true -DallowSnapshots=true -P homelab
      - name: Maven Publish
        run: |
          mvn -B deploy -P homelab
      - name: Finish release
        env:
          GITHUB_ACTOR: 3dwardch3ng
          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
        run: |
          mvn gitflow:release-finish -B -DpushRemote=true -DallowSnapshots=true -P homelab