Update release.yml

Author: marcus-talbot42

.github/workflows/release.yml

@@ -1,42 +1,32 @@
-name: Manual Release
+name: Publish Java Library to Maven Central
 
 on:
   workflow_dispatch:
 
 jobs:
-  release:
+  publish:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write # To allow pushing tags and commits
+    
     steps:
-      - name: Checkout code
+      - name: Checkout repository
         uses: actions/checkout@v4
-        with:
-          persist-credentials: false # Recommended for security
 
-      - name: Set up Java JDK
+      - name: Set up JDK, GPG, and Maven Central Authentication
         uses: actions/setup-java@v4
         with:
-          java-version: '21' # Use the Java version from your pom.xml
+          java-version: '21'
           distribution: 'temurin'
+          # Configure server for Sonatype OSSRH
+          server-id: ossrh
+          server-username: SONATYPE_USERNAME # Env var for username
+          server-password: SONATYPE_KEY    # Env var for password/token
+          # Import GPG key for signing
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE # Env var for passphrase
 
-      - name: Set up GPG
-        run: |
-          echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
-          echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --passphrase-fd 0 --edit-key "${{ secrets.GPG_KEY_ID }}" trust
-          gpg --export-secret-keys -o secring.gpg
-          gpg --export --armor "${{ secrets.GPG_KEY_ID }}" > pubring.gpg
-
-      - name: Build and Release
+      - name: Publish package to Maven Central
+        run: mvn --batch-mode -P release deploy
         env:
-          MAVEN_GPG_SECRET_KEYRING_FILE: secring.gpg
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-          MAVEN_GPG_PUBLIC_KEYRING_FILE: pubring.gpg
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # For pushing tags
-        run: |
-          mvn --batch-mode -DskipTests -Darguments="-Dgpg.executable=gpg -Dgpg.secretKeyringFile=$MAVEN_GPG_SECRET_KEYRING_FILE -Dgpg.passphrase=$MAVEN_GPG_PASSPHRASE -Dgpg.publicKeyringFile=$MAVEN_GPG_PUBLIC_KEYRING_FILE" release:prepare release:perform
-
-      - name: Clean up GPG files
-        if: always()
-        run: |
-          rm -f secring.gpg pubring.gpg
+          SONATYPE_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          SONATYPE_KEY: ${{ secrets.OSSRH_TOKEN }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}