Update build/release workflows to use Spring's GitHub Actions

Author: fmbenhassine

.github/workflows/central-sync-close.yml

@@ -3,6 +3,8 @@ name: CI
 on:
   workflow_dispatch:
   push:
+    branches:
+      - main
     paths-ignore:
       - '.github/**'
 
@@ -24,52 +26,35 @@ jobs:
             os: windows-latest
     name: CI Build ${{ matrix.nickname }}
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
+      - uses: actions/checkout@v4.2.2
+      - name: Spring Gradle Build Action
+        uses: spring-io/spring-gradle-build-action@v2
         with:
-          distribution: adopt
-          java-version: |
-            22
-            17
-          cache: gradle
-      - name: Build
+          java-version: '17'
+          distribution: 'temurin'
+      - name: Build with Gradle
         run: ./gradlew build
   publish:
+    needs: build
     runs-on: ubuntu-latest
     if: github.repository_owner == 'spring-projects'
-    needs: [build]
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v3
+      - uses: actions/checkout@v4.2.2
+      - name: Spring Gradle Build Action
+        uses: spring-io/spring-gradle-build-action@v2
         with:
-          distribution: adopt
-          java-version: |
-            22
-            17
-          cache: gradle
-      - uses: jfrog/setup-jfrog-cli@v3
-        env:
-          JF_URL: 'https://repo.spring.io'
-          JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }}
-      - name: Configure JFrog Cli
-        run: |
-          jf gradlec \
-            --use-wrapper \
-            --uses-plugin \
-            --deploy-ivy-desc=false \
-            --server-id-resolve=${{ vars.JF_SERVER_ID }} \
-            --server-id-deploy=${{ vars.JF_SERVER_ID }} \
-            --repo-resolve snapshot \
-            --repo-deploy snapshot
-          echo JFROG_CLI_BUILD_NAME=spring-shell-main >> $GITHUB_ENV
-          echo JFROG_CLI_BUILD_NUMBER=$GITHUB_RUN_NUMBER >> $GITHUB_ENV
-      - name: Build and Publish
-        env:
-          ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_PRIVATE_KEY }}
-          ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_PASSPHRASE }}
-          GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
-          GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
-          GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
-        run: |
-          jf gradle build artifactoryPublish
-          jf rt build-publish
+          java-version: '17'
+          distribution: 'temurin'
+      - name: Build with Gradle
+        run: ./gradlew -Dmaven.repo.local=$(pwd)/deployment-repository -x test build publishToMavenLocal
+      - name: Deploy to Artifactory
+        uses: spring-io/artifactory-deploy-action@v0.0.2
+        with:
+          uri: 'https://repo.spring.io'
+          username: ${{ secrets.ARTIFACTORY_USERNAME }}
+          password: ${{ secrets.ARTIFACTORY_PASSWORD }}
+          build-name: 'spring-shell-main'
+          repository: 'libs-snapshot-local'
+          folder: 'deployment-repository'
+          signing-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          signing-passphrase: ${{ secrets.GPG_PASSPHRASE }}

.github/workflows/central-sync-release.yml

@@ -1,180 +1,31 @@
-name: Release GA
-run-name: ${{ format('{0} ({1})', github.workflow, github.ref_name) }}
+name: Release to Maven Central
 
 on:
   workflow_dispatch:
+    inputs:
+      buildName:
+        description: "Artifactory build name"
+        required: true
+      buildNumber:
+        description: "Artifactory build number"
+        required: true
 
 jobs:
-  staging:
-    runs-on: ubuntu-latest
-    outputs:
-      project-version: ${{ steps.output.outputs.project-version }}
-    steps:
-    - uses: actions/checkout@v3
-    - uses: actions/setup-java@v3
-      with:
-        distribution: adopt
-        java-version: |
-          22
-          17
-    - uses: jfrog/setup-jfrog-cli@v3
-      env:
-        JF_URL: 'https://repo.spring.io'
-        JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }}
-    - name: Configure JFrog Cli
-      run: |
-        jf gradlec \
-          --use-wrapper \
-          --uses-plugin \
-          --deploy-ivy-desc=false \
-          --server-id-resolve=${{ vars.JF_SERVER_ID }} \
-          --server-id-deploy=${{ vars.JF_SERVER_ID }} \
-          --repo-resolve release \
-          --repo-deploy libs-staging-local
-        echo JFROG_CLI_BUILD_NAME=spring-shell-main-release >> $GITHUB_ENV
-        echo JFROG_CLI_BUILD_NUMBER=$GITHUB_RUN_NUMBER >> $GITHUB_ENV
-    - name: Configure Release Version
-      run: |
-        snapshotVersion=$( awk -F '=' '$1 == "version" { print $2 }' gradle.properties )
-        plainVersion=${snapshotVersion%-SNAPSHOT}
-        sed -i "s/version=$snapshotVersion/version=$plainVersion/" gradle.properties
-        echo PROJECT_VERSION=$plainVersion >> $GITHUB_ENV
-    - name: Tag Release
-      env:
-        PROJECT_VERSION: ${{ env.PROJECT_VERSION }}
-      run: |
-        git config --global user.name github-actions[bot]
-        git config --global user.email 41898282+github-actions[bot]@users.noreply.github.com
-        git checkout -b $PROJECT_VERSION
-        git commit -a -m "Release $PROJECT_VERSION"
-        git tag "v$PROJECT_VERSION"
-    - name: Build and Publish
-      env:
-        DISABLE_SAMPLES: true
-        ORG_GRADLE_PROJECT_signingKey: ${{ secrets.GPG_PRIVATE_KEY }}
-        ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.GPG_PASSPHRASE }}
-        GRADLE_ENTERPRISE_CACHE_USERNAME: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USER }}
-        GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
-        GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_SECRET_ACCESS_KEY }}
-      run: |
-        jf gradle build artifactoryPublish
-        jf rt build-publish
-    - name: Push Release
-      env:
-        PROJECT_VERSION: ${{ env.PROJECT_VERSION }}
-      run: |
-        git push origin $PROJECT_VERSION
-        git push --tags origin
-    - name: Output
-      id: output
-      env:
-        PROJECT_VERSION: ${{ env.PROJECT_VERSION }}
-      run: |
-        echo "project-version=$PROJECT_VERSION" >> $GITHUB_OUTPUT
-
-  promote:
-    runs-on: ubuntu-latest
-    needs: staging
-    environment: promote
-    steps:
-    - uses: actions/checkout@v3
-    - uses: jfrog/setup-jfrog-cli@v3
-      env:
-        JF_URL: 'https://repo.spring.io'
-        JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }}
-    - name: Configure JFrog Cli
-      run: |
-        echo JFROG_CLI_BUILD_NAME=spring-shell-main-release >> $GITHUB_ENV
-        echo JFROG_CLI_BUILD_NUMBER=$GITHUB_RUN_NUMBER >> $GITHUB_ENV
-    - name: Promote Build
-      run: |
-        jf rt build-promote libs-release-local
-
-  ghrelease:
-    runs-on: ubuntu-latest
-    needs: [staging, promote]
-    steps:
-    - uses: actions/checkout@v3
-    - name: Install Tooling
-      run: |
-        curl -sSL https://github.com/cbroglie/mustache/releases/download/v1.2.2/mustache_1.2.2_linux_amd64.tar.gz | sudo tar -C /usr/local/bin/ --no-same-owner -xzv mustache
-    - name: GitHub Release
-      env:
-        PROJECT_VERSION: ${{needs.staging.outputs.project-version}}
-        GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-        RELEASE_NOTES_FILE: ${{runner.temp}}/release_notes.md5
-        RELEASE_NOTES_DATA: ${{runner.temp}}/release_notes_data.json
-        RELEASE_NOTES_HEADERS: ${{runner.temp}}/release_notes_headers.json
-        RELEASE_NOTES_FOOTERS: ${{runner.temp}}/release_notes_footers.json
-        RELEASE_NOTES_ISSUES: ${{runner.temp}}/release_notes_issues.json
-        RELEASE_NOTES_PRS: ${{runner.temp}}/release_notes_prs.json
-      run: |
-        gh issue list \
-          --repo spring-projects/spring-shell \
-          --search milestone:$PROJECT_VERSION \
-          --label automation/rlnotes-header  \
-          --state all --json title,body \
-          --jq '{headers:map(.),headerslength:(length)}' \
-          > $RELEASE_NOTES_HEADERS
-        gh issue list \
-          --repo spring-projects/spring-shell \
-          --search milestone:$PROJECT_VERSION \
-          --label automation/rlnotes-footer  \
-          --state all --json title,body \
-          --jq '{footers:map(.),footerslength:(length)}' \
-          > $RELEASE_NOTES_FOOTERS
-        gh issue list \
-          --repo spring-projects/spring-shell \
-          --search milestone:$PROJECT_VERSION \
-          --state all --json number,title,labels \
-          --jq '{issues:map(select((.labels | length == 0) or (any(.labels[].name; startswith("automation/rlnotes")|not))))}' \
-          > $RELEASE_NOTES_ISSUES
-        gh pr list \
-          --repo spring-projects/spring-shell \
-          --search milestone:$PROJECT_VERSION \
-          --state all --json number,title,labels \
-          --jq '{prs:map(.),prslength:(length)}' \
-          > $RELEASE_NOTES_PRS
-        jq -s '{issues:(.[0].issues),prs:(.[1].prs),prslength:(.[1].prslength),headers:(.[2].headers),headerslength:(.[2].headerslength),footers:(.[3].footers), footerslength:(.[3].footerslength)}' \
-          $RELEASE_NOTES_ISSUES \
-          $RELEASE_NOTES_PRS \
-          $RELEASE_NOTES_HEADERS \
-          $RELEASE_NOTES_FOOTERS \
-          > $RELEASE_NOTES_DATA
-        mustache $RELEASE_NOTES_DATA .github/rlnotes.mustache > $RELEASE_NOTES_FILE
-        gh release create v$PROJECT_VERSION \
-          --draft \
-          --title "$PROJECT_VERSION" \
-          --notes-file $RELEASE_NOTES_FILE
 
-  central:
+  release:
     runs-on: ubuntu-latest
-    needs: ghrelease
-    environment: central
     steps:
-    - uses: actions/checkout@v3
-    - uses: jfrog/setup-jfrog-cli@v3
-      env:
-        JF_URL: 'https://repo.spring.io'
-        JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }}
-    - name: Configure JFrog Cli
-      run: |
-        echo JFROG_CLI_BUILD_NAME=spring-shell-main-release >> $GITHUB_ENV
-        echo JFROG_CLI_BUILD_NUMBER=$GITHUB_RUN_NUMBER >> $GITHUB_ENV
-    - name: Download Release Files
-      run: |
-        jf rt download \
-          --spec .github/release-files-spec.json \
-          --spec-vars "buildname=$JFROG_CLI_BUILD_NAME;buildnumber=$JFROG_CLI_BUILD_NUMBER"
-    - uses: spring-io/nexus-sync-action@main
-      with:
-        username: ${{ secrets.OSSRH_S01_TOKEN_USERNAME }}
-        password: ${{ secrets.OSSRH_S01_TOKEN_PASSWORD }}
-        staging-profile-name: ${{ secrets.OSSRH_STAGING_PROFILE_NAME }}
-        create: true
-        upload: true
-        close: true
-        close-timeout: 5400
-        release: true
-        release-timeout: 5400
-        generate-checksums: true
+      - uses: actions/checkout@v4.2.2
+      - name: Set Up JFrog CLI
+        uses: jfrog/setup-jfrog-cli@9fe0f98bd45b19e6e931d457f4e98f8f84461fb5 # v4.4.1
+        env:
+          JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }}
+      - name: Download Release Artifacts
+        shell: bash
+        run: jf rt download --spec .github/release-files-spec.json --spec-vars 'buildname=${{ github.event.inputs.buildName }};buildnumber=${{ github.event.inputs.buildNumber }}'
+      - name: Sync to Maven Central
+        uses: spring-io/central-publish-action@0cdd90d12e6876341e82860d951e1bcddc1e51b6 # v0.2.0
+        with:
+          token: ${{ secrets.CENTRAL_TOKEN_PASSWORD }}
+          token-name: ${{ secrets.CENTRAL_TOKEN_USERNAME }}
+          timeout: 60m