publish-maven-artifacts.yml

# Copyright 2024 The Cross-Media Measurement Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      base-version:
        description: Base artifact version, which will be suffixed with "-SNAPSHOT"
        required: true

jobs:
  publish-artifacts:
    name: Publish Maven artifacts
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@v4

      - id: get-artifact-version
        env:
          BASE_VERSION: ${{ inputs.base-version }}
        run: |
          declare artifact_version
          if [[ "$GITHUB_EVENT_NAME" == 'release' ]]; then
            artifact_version="${GITHUB_REF_NAME#v}"
          else
            artifact_version="${BASE_VERSION}-SNAPSHOT"
          fi
          
          echo "artifact-version=${artifact_version}" >> "$GITHUB_OUTPUT"

      - name: Set up Bazel
        run: |
          mkdir -p ~/.local/bin
          bazelisk_path="$(which bazelisk)"
          ln -s "${bazelisk_path}" ~/.local/bin/bazel

      - name: Set up Buildozer
        run: |
          cd ~/.local/bin
          curl -L -o buildozer https://github.com/bazelbuild/buildtools/releases/download/v7.1.2/buildozer-linux-amd64
          echo '8d5c459ab21b411b8be059a8bdf59f0d3eabf9dff943d5eccb80e36e525cc09d  buildozer' > buildozer.sha256
          sha256sum --check buildozer.sha256
          chmod +x buildozer

      - name: Write ~/.bazelrc
        run: |
          echo 'common --config=ci' >> ~/.bazelrc

      - name: Get Bazel cache params
        id: get-cache-params
        uses: world-federation-of-advertisers/actions/bazel-get-cache-params@v2
        with:
          cache-version: 1

      - name: Restore Bazel cache
        uses: actions/cache/restore@v3
        with:
          path: ${{ steps.get-cache-params.outputs.cache-path }}
          key: ${{ steps.get-cache-params.outputs.cache-key }}
          restore-keys: |-
            ${{ steps.get-cache-params.outputs.restore-key }}

      # Patch MODULE.bazel and MODULE.bazel.lock to specify version.
      # TODO(bazelbuild/bazel#22919): Use alternative mechanism when available.
      - name: Patch module version
        env:
          ARTIFACT_VERSION: ${{ steps.get-artifact-version.outputs.artifact-version }}
        run: |
          # Make sure lockfile is still valid before changing anything.
          bazel mod deps --lockfile_mode=error

          # Update MODULE.bazel.
          buildozer "set version $ARTIFACT_VERSION" //MODULE.bazel:%module
          
          # Update lockfile to pick up changes.
          bazel mod deps --lockfile_mode=update

      - name: Publish artifacts
        env:
          MAVEN_REPO: https://maven.pkg.github.com/${{ github.repository }}
          # TODO(bazelbuild/rules_jvm_external#1186): Use GITHUB_TOKEN instead.
          MAVEN_USER: ${{ vars.MAVEN_USER }}
          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
        run: |
          bazel query "kind('^maven_publish', //src/main/...)" | xargs bazel run