Auto publish before JBang tests (#13779)

Author: koppor

.github/workflows/publish.yml

@@ -1,16 +1,17 @@
 name: Publish to maven central
 
 on:
-  pull_request:
+  # On releases
   push:
-    branches:
-      - main
     tags:
       - '**'
-  schedule:
-    # Run on each Monday
-    # Additional run in addition to the other events, because some resources could have changes
-    - cron: '2 3 * * 1'
+
+  # Called by the JBang testing jobs to ensure that SNAPSHOT is uptodate
+  workflow_call:
+    secrets:
+      KOPPOR_SIGNING_SECRETKEYRINGFILE_BASE64:
+        required: true
+
   workflow_dispatch:
     inputs:
       tagbuild:
@@ -19,6 +20,11 @@ on:
         default: false
         type: boolean
 
+  # Additional run in addition to the other events, because some resources could have changes
+  schedule:
+    # Run on each Monday
+    - cron: '2 3 * * 1'
+
 permissions:
   actions: write
   contents: read
@@ -56,7 +62,8 @@ jobs:
       github.event_name == 'schedule' ||
       github.event_name == 'workflow_dispatch' ||
       (needs.detect_changes.outputs.changed == 'true' &&
-        ((github.event_name == 'push' && github.repository == 'JabRef/jabref') ||
+        ((github.event_name == 'workflow_call' && github.repository == 'JabRef/jabref') ||
+         (github.event_name == 'push' && github.repository == 'JabRef/jabref') ||
          (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == 'JabRef/jabref'))
       )
     runs-on: ubuntu-latest

.github/workflows/tests-code.yml

@@ -8,11 +8,7 @@ on:
   pull_request:
   merge_group:
   workflow_dispatch:
-  # Re-run JBang tests after the SNAPSHOT is updated
-  workflow_run:
-    workflows: ["Publish to maven central"]
-    types:
-      - completed
+
 env:
   AstrophysicsDataSystemAPIKey: ${{ secrets.AstrophysicsDataSystemAPIKey_FOR_TESTS }}
   BiodiversityHeritageApiKey: ${{ secrets.BiodiversityHeritageApiKey_FOR_TESTS}}
@@ -400,9 +396,16 @@ jobs:
           CI: "true"
           DBMS: "postgresql"
 
+  publish:
+    if: github.ref == 'refs/heads/main'
+    uses: ./.github/workflows/publish.yml
+    secrets:
+      KOPPOR_SIGNING_SECRETKEYRINGFILE_BASE64: ${{ secrets.KOPPOR_SIGNING_SECRETKEYRINGFILE_BASE64 }}
+
   jbang:
     name: JBang (main)
     runs-on: ubuntu-latest
+    needs: publish
     if: github.ref == 'refs/heads/main'
     steps:
       - name: Checkout source
@@ -438,6 +441,7 @@ jobs:
   jbang-pr:
     name: JBang (PR)
     runs-on: ubuntu-latest
+    # does not need publish, because the JBang scripts are modified
     if: github.ref != 'refs/heads/main'
     strategy:
       fail-fast: false