publish-maven-central.yml

name: Publish Maven Central

on:
  workflow_dispatch:
    inputs:
      auto_publish:
        description: "Automatically publish after validation (true/false)"
        required: true
        default: "false"
      wait_until:
        description: "Central wait mode (uploaded/validated/published)"
        required: true
        default: "validated"
  push:
    tags:
      - "v*"

permissions:
  contents: read

jobs:
  publish:
    runs-on: ubuntu-latest
    env:
      CENTRAL_PORTAL_USERNAME: ${{ secrets.CENTRAL_PORTAL_USERNAME }}
      CENTRAL_PORTAL_PASSWORD: ${{ secrets.CENTRAL_PORTAL_PASSWORD }}
      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
      MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
    steps:
      - uses: actions/checkout@v4
      - name: Set up JDK 21 + Maven server credentials + GPG key
        uses: actions/setup-java@v4
        with:
          java-version: "21"
          distribution: "temurin"
          cache: maven
          server-id: central
          server-username: CENTRAL_PORTAL_USERNAME
          server-password: CENTRAL_PORTAL_PASSWORD
          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
          gpg-passphrase: GPG_PASSPHRASE
      - name: Validate required secrets
        run: |
          test -n "$CENTRAL_PORTAL_USERNAME" || (echo "Missing CENTRAL_PORTAL_USERNAME" && exit 1)
          test -n "$CENTRAL_PORTAL_PASSWORD" || (echo "Missing CENTRAL_PORTAL_PASSWORD" && exit 1)
          test -n "$GPG_PASSPHRASE" || (echo "Missing GPG_PASSPHRASE" && exit 1)
          test -n "$MAVEN_GPG_PASSPHRASE" || (echo "Missing MAVEN_GPG_PASSPHRASE" && exit 1)
      - name: Publish to Maven Central
        run: |
          EVENT_NAME="${{ github.event_name }}"
          if [ "$EVENT_NAME" = "push" ]; then
            AUTO_PUBLISH="true"
            # Central queues can exceed 30m on busy windows; wait only for validation in CI
            # and let Central complete publish asynchronously.
            WAIT_UNTIL="validated"
          else
            AUTO_PUBLISH="${{ github.event.inputs.auto_publish }}"
            WAIT_UNTIL="${{ github.event.inputs.wait_until }}"
            if [ -z "$AUTO_PUBLISH" ]; then
              AUTO_PUBLISH="false"
            fi
            if [ -z "$WAIT_UNTIL" ]; then
              WAIT_UNTIL="validated"
            fi
          fi
          echo "central.auto.publish=$AUTO_PUBLISH"
          echo "central.wait.until=$WAIT_UNTIL"
          mvn -B -Pcentral-release -DskipTests \
            -Dcentral.auto.publish="$AUTO_PUBLISH" \
            -Dcentral.wait.until="$WAIT_UNTIL" \
            -Dcentral.wait.max.time="PT120M" \
            -Dcentral.wait.poll.interval="PT15S" \
            deploy --file pom.xml