build-with-release-profile.yml

name: Build with '-Prelease'

# Simply runs the build with -Prelease to avoid nasty surprises when running the release-to-maven-central workflow.


on:
  # Handle all branches for now
  push:
  pull_request_target:
  workflow_dispatch:

# Only run the latest job
concurrency:
  group: '${{ github.workflow }} @ ${{ github.head_ref || github.ref }}'
  cancel-in-progress: true

jobs:
  build:
    # Only run this job for the main repository, not for forks
    if: github.repository == 'a2aproject/a2a-java'
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: maven

      # Use secrets to import GPG key
      - name: Import GPG key
        uses: crazy-max/ghaction-import-gpg@v6
        with:
          gpg_private_key: ${{ secrets.GPG_SIGNING_KEY }}
          passphrase: ${{ secrets.GPG_SIGNING_PASSPHRASE }}

      # Create settings.xml for Maven since it needs the 'central-a2asdk-temp' server.
      # Populate wqith username and password from secrets
      - name: Create settings.xml
        run: |
          mkdir -p ~/.m2
          echo "<settings><servers><server><id>central-a2asdk-temp</id><username>${{ secrets.CENTRAL_TOKEN_USERNAME }}</username><password>${{ secrets.CENTRAL_TOKEN_PASSWORD }}</password></server></servers></settings>" > ~/.m2/settings.xml

      # Build with the same settings as the deploy job
      # -s uses the settings file we created.
      - name: Build with same arguments as deploy job
        run: >
          mvn -B install
          -s ~/.m2/settings.xml
          -P release
          -DskipTests
          -Drelease.auto.publish=true
        env:
          # GPG passphrase is set as an environment variable for the gpg plugin to use
          GPG_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}