Publish release #16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish release | |
| on: | |
| workflow_dispatch: | |
| repository_dispatch: | |
| types: [ stdlib-release-pipeline ] | |
| jobs: | |
| publish-release: | |
| runs-on: ubuntu-latest | |
| if: github.repository_owner == 'ballerina-platform' | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v2 | |
| with: | |
| distribution: 'temurin' | |
| java-version: 17.0.7 | |
| - name: Build with Gradle | |
| env: | |
| packageUser: ${{ github.actor }} | |
| packagePAT: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| git config --global user.name ${{ secrets.BALLERINA_BOT_USERNAME }} | |
| git config --global user.email ${{ secrets.BALLERINA_BOT_EMAIL }} | |
| ./gradlew build -x check -x test | |
| - name: Create lib directory if not exists | |
| run: mkdir -p ballerina/lib | |
| - name: Run Trivy vulnerability scanner | |
| uses: aquasecurity/trivy-action@master | |
| with: | |
| scan-type: 'rootfs' | |
| scan-ref: '/github/workspace/ballerina/lib' | |
| format: 'table' | |
| timeout: '10m0s' | |
| exit-code: '1' | |
| - name: Set version env variable | |
| run: echo "VERSION=$((grep -w 'version' | cut -d= -f2) < gradle.properties | rev | cut --complement -d- -f1 | rev)" >> $GITHUB_ENV | |
| - name: Pre release dependency version update | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.BALLERINA_BOT_TOKEN }} | |
| run: | | |
| echo "Version: ${VERSION}" | |
| git checkout -b release-${VERSION} | |
| sed -i 's/ballerinaLangVersion=\(.*\)-SNAPSHOT/ballerinaLangVersion=\1/g' gradle.properties | |
| sed -i 's/ballerinaLangVersion=\(.*\)-[0-9]\{8\}-[0-9]\{6\}-.*$/ballerinaLangVersion=\1/g' gradle.properties | |
| sed -i 's/stdlib\(.*\)=\(.*\)-SNAPSHOT/stdlib\1=\2/g' gradle.properties | |
| sed -i 's/stdlib\(.*\)=\(.*\)-[0-9]\{8\}-[0-9]\{6\}-.*$/stdlib\1=\2/g' gradle.properties | |
| sed -i 's/observe\(.*\)=\(.*\)-SNAPSHOT/observe\1=\2/g' gradle.properties | |
| sed -i 's/observe\(.*\)=\(.*\)-[0-9]\{8\}-[0-9]\{6\}-.*$/observe\1=\2/g' gradle.properties | |
| git add gradle.properties | |
| git commit -m "Move dependencies to stable version" || echo "No changes to commit" | |
| - name: Grant execute permission for gradlew | |
| run: chmod +x gradlew | |
| - name: Publish artifact | |
| env: | |
| BALLERINA_CENTRAL_ACCESS_TOKEN: ${{ secrets.BALLERINA_CENTRAL_ACCESS_TOKEN }} | |
| GITHUB_TOKEN: ${{ secrets.BALLERINA_BOT_TOKEN }} | |
| packageUser: ${{ secrets.BALLERINA_BOT_USERNAME }} | |
| packagePAT: ${{ secrets.BALLERINA_BOT_TOKEN }} | |
| publishUser: ${{ secrets.BALLERINA_BOT_USERNAME }} | |
| publishPAT: ${{ secrets.BALLERINA_BOT_TOKEN }} | |
| nexusUser: ${{ secrets.NEXUS_USERNAME }} | |
| nexusPassword: ${{ secrets.NEXUS_PASSWORD }} | |
| CLIENT_ID: ${{ secrets.CLIENT_ID }} | |
| CLIENT_SECRET: ${{ secrets.CLIENT_SECRET }} | |
| REFRESH_TOKEN: ${{ secrets.REFRESH_TOKEN }} | |
| run: | | |
| ./gradlew clean release -Prelease.useAutomaticVersion=true | |
| ./gradlew -Pversion=${VERSION} publish -x test -PpublishToCentral=true | |
| - name: GitHub Release and Release Sync PR | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.BALLERINA_BOT_TOKEN }} | |
| run: | | |
| gh release create v$VERSION --title "module-ballerinax-persist.sql-v$VERSION" | |
| gh pr create --title "[Automated] Sync main after $VERSION release" --body "Sync main after $VERSION release" | |