maven-release.yml

name: "0 Central Release Job" # Adding the 0 so that it's on top of the list of github actions
on:
  workflow_dispatch: # Manual trigger so you don't release on every push
    inputs:
      ref_to_release:
        description: "[Optional] Branch or commit to release. Default: Github default branch"
        required: false
        type: string
        # default has to be a static string, no variables allowed
        default: ""

jobs:
  call-release-job:
    permissions:
      contents: write # needed to push commit and tag back to the repository
    uses: project-ncl/shared-github-actions/.github/workflows/maven-release.yml@646d9b629925d6405fb06ed1476aefd6b2cdca86 # v0.0.23
    with:
      java_version: "17"
      ref_to_release: ${{ inputs.ref_to_release }}
      release_command: "mvn -B -V release:prepare release:perform -DlocalCheckout=true -DpushChanges=false"
    secrets:
      SONATYPE_USERNAME: ${{ secrets.SONATYPE_BOT_USERNAME }}
      SONATYPE_PASSWORD: ${{ secrets.SONATYPE_BOT_TOKEN }}
      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}