Skip to content
# Copyright 2024 The Cross-Media Measurement Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
on:
release:
workflow_dispatch:
inputs:
base-version:
description: Base artifact version, which will be suffixed with "-SNAPSHOT"
required: true
jobs:
publish-artifacts:
name: Publish Maven artifacts
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v4
- id: get-artifact-version
env:
BASE_VERSION: ${{ inputs.base-version }}
run: |
declare artifact_version
if [[ "$GITHUB_EVENT_NAME" == 'release' ]]; then
artifact_version="${GITHUB_REF_NAME#v}"
else
artifact_version="${BASE_VERSION}-SNAPSHOT"
fi
echo "artifact-version=${artifact_version}" >> "$GITHUB_OUTPUT"
- name: Set up Bazel
run: |
mkdir -p ~/.local/bin
bazelisk_path="$(which bazelisk)"
ln -s "${bazelisk_path}" ~/.local/bin/bazel
- name: Set up Buildozer
run: |
cd ~/.local/bin
curl -L -o buildozer https://github.com/bazelbuild/buildtools/releases/download/v7.1.2/buildozer-linux-amd64
echo '8d5c459ab21b411b8be059a8bdf59f0d3eabf9dff943d5eccb80e36e525cc09d buildozer' > buildozer.sha256
sha256sum --check buildozer.sha256
chmod +x buildozer
- name: Write ~/.bazelrc
run: |
echo 'common --config=ci' >> ~/.bazelrc
- name: Get Bazel cache params
id: get-cache-params
uses: world-federation-of-advertisers/actions/bazel-get-cache-params@v2
with:
cache-version: 1
- name: Restore Bazel cache
uses: actions/cache/restore@v3
with:
path: ${{ steps.get-cache-params.outputs.cache-path }}
key: ${{ steps.get-cache-params.outputs.cache-key }}
restore-keys: |-
${{ steps.get-cache-params.outputs.restore-key }}
# Patch MODULE.bazel and MODULE.bazel.lock to specify version.
# TODO(bazelbuild/bazel#22919): Use alternative mechanism when available.
- name: Patch module version
env:
ARTIFACT_VERSION: ${{ steps.get-artifact-version.outputs.artifact-version }}
run: |
# Make sure lockfile is still valid before changing anything.
bazel mod deps --lockfile_mode=error
# Update MODULE.bazel.
buildozer "set version $ARTIFACT_VERSION" //MODULE.bazel:%module
# Update lockfile to pick up changes.
bazel mod deps --lockfile_mode=update
- name: Publish artifacts
env:
MAVEN_REPO: https://maven.pkg.github.com/${{ github.repository }}
# TODO(bazelbuild/rules_jvm_external#1186): Use GITHUB_TOKEN instead.
MAVEN_USER: ${{ vars.MAVEN_USER }}
MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
run: |
bazel query "kind('^maven_publish', //src/main/...)" | xargs bazel run