-
Notifications
You must be signed in to change notification settings - Fork 0
156 lines (130 loc) · 4.27 KB
/
ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
name: CI
on:
workflow_dispatch: {}
push:
branches:
- main
- master
- beta
- 'sdk-release/**'
- 'feature/**'
- development
tags:
- 'v[0-9]+.[0-9]+.[0-9]+*'
pull_request:
branches:
- main
- master
- beta
- 'sdk-release/**'
- 'feature/**'
- development
jobs:
build:
name: Build
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Setup Java
uses: actions/setup-java@v4
with:
java-version: "17" # always use 17 LTS for building
distribution: zulu
architecture: x64
- name: Cache Maven dependencies
uses: actions/cache@v2
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}-${{ hashFiles('**/src/**') }}
restore-keys: |
${{ runner.os }}-maven
- name: Configure GPG Key
run: |
echo "$GPG_PRIVATE_KEY" | base64 --decode | gpg --batch --import
env:
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
- name: Install dependencies
run: mvn clean install -DskipTests
- name: Save Maven build artifacts
if: success()
uses: actions/upload-artifact@v3
with:
name: maven-artifacts
path: target/
test:
name: Test
runs-on: ubuntu-latest
needs: build # Ensure build job runs before this one
strategy:
fail-fast: false
matrix:
java-version: ["8", "11", "17", "18", "19", "20"]
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: maven-artifacts
- name: Setup Test Java Runtime
uses: actions/setup-java@v4
with:
java-version: ${{ matrix.java-version }}
distribution: zulu
architecture: x64
- name: Cache Maven dependencies for tests
uses: actions/cache@v2
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ matrix.java-version }}-${{ hashFiles('**/pom.xml') }}-${{ hashFiles('**/src/**') }}
restore-keys: |
${{ runner.os }}-maven-
- name: Run test suite
env:
CORBADO_PROJECT_ID: ${{ secrets.CORBADO_PROJECT_ID }}
CORBADO_API_SECRET: ${{ secrets.CORBADO_API_SECRET }}
CORBADO_FRONTEND_API: ${{ vars.CORBADO_FRONTEND_API }}
CORBADO_BACKEND_API: ${{ vars.CORBADO_BACKEND_API }}
run: mvn --batch-mode --update-snapshots verify -DskipInstall
deploy:
name: Deploy to Maven Central
runs-on: ubuntu-latest
needs: [build,test]
if: startsWith(github.ref, 'refs/tags/v') || github.event_name == 'workflow_dispatch' # Only run on version tags or if triggered manually
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Download build artifacts
uses: actions/download-artifact@v3
with:
name: maven-artifacts
- name: Setup Java
uses: actions/setup-java@v4
with:
java-version: "17"
distribution: zulu
architecture: x64
server-id: central
- name: Cache Maven dependencies
uses: actions/cache@v2
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}-${{ hashFiles('**/src/**') }}
restore-keys: |
${{ runner.os }}-maven-
- name: Setup GPG for Signing
run: |
echo "${{ secrets.GPG_PRIVATE_KEY }}" | base64 --decode | gpg --batch --import
echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
gpg-connect-agent reloadagent /bye
- name: Setup maven
uses: s4u/[email protected]
with:
githubServer: false
servers: '[{"id": "central", "username": "${{ vars.OSSRH_USERNAME }}", "password": "${{ secrets.OSSRH_PASSWORD }}"}]'
- name: Deploy to Maven Central
env:
GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
run: mvn deploy -DskipTests -P release