release.yml

name: Release

on:
  push:
    tags:
      - 'v*'

permissions:
  id-token: write
  contents: read

defaults:
  run:
    shell: bash

jobs:
  release:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - name: Checkout
        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0

      # Workaround for https://github.com/actions/checkout/issues/290, https://github.com/actions/checkout/issues/882
      - name: Fetch annotated tags
        run: git fetch --tags --force

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
        with:
          role-to-assume: ${{ vars.AWS_ROLE_PROD_JAVA2TS }}
          aws-region: us-east-1

      - name: Milestone or Release?
        id: repository
        env:
          AWS_CODEARTIFACT_DOMAIN: ${{ vars.AWS_CODEARTIFACT_DOMAIN }}
          AWS_CODEARTIFACT_OWNER: ${{ vars.AWS_CODEARTIFACT_OWNER }}
          GITHUB_REF: ${{ github.ref }}
        run: |
          token=$(aws codeartifact get-authorization-token --domain "${AWS_CODEARTIFACT_DOMAIN}" --domain-owner "${AWS_CODEARTIFACT_OWNER}" --query authorizationToken --output text)
          echo "::add-mask::$token"
          echo "token=$token" >> $GITHUB_OUTPUT
          echo "GITHUB_REF=$GITHUB_REF"
          if [[ "$GITHUB_REF" =~ .*-M[0-9]+ ]]; then
            echo "Milestone version detected"
            echo "repositoryId=codeartifact-milestones" >> $GITHUB_OUTPUT
            echo "repositoryUrl=https://${AWS_CODEARTIFACT_DOMAIN}-${AWS_CODEARTIFACT_OWNER}.d.codeartifact.us-east-1.amazonaws.com/maven/milestones" >> $GITHUB_OUTPUT
          else
            echo "Release version detected"
            echo "repositoryId=codeartifact-releases" >> $GITHUB_OUTPUT
            echo "repositoryUrl=https://${AWS_CODEARTIFACT_DOMAIN}-${AWS_CODEARTIFACT_OWNER}.d.codeartifact.us-east-1.amazonaws.com/maven/releases" >> $GITHUB_OUTPUT
          fi

      - name: Set up JDK 21
        uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1
        with:
          distribution: 'zulu'
          java-version: '21'
          server-id: ${{ steps.repository.outputs.repositoryId }}
          server-username: MAVEN_USERNAME
          server-password: MAVEN_PASSWORD

      - name: Deploy
        env:
          MAVEN_USERNAME: aws
          MAVEN_PASSWORD: ${{ steps.repository.outputs.token }}
          REPOSITORY_ID: ${{ steps.repository.outputs.repositoryId}}
          REPOSITORY_URL: ${{ steps.repository.outputs.repositoryUrl}}
        run: |
          mvn --batch-mode -Dstyle.color=always --no-transfer-progress \
            deploy \
            -Prelease \
            -DrepositoryId="${REPOSITORY_ID}" \
            -DrepositoryUrl="${REPOSITORY_URL}"