add publish

Author: sthulb

.github/workflows/release.yml

@@ -27,6 +27,10 @@ run-name: Release
 permissions: 
   contents: read
 
+env:
+  RELEASE_COMMIT: ${{ github.sha }}
+  RELEASE_TAG_VERSION: ${{ inputs.version }}
+
 jobs:
   version_seal:
     runs-on: ubuntu-latest
@@ -114,4 +118,74 @@ jobs:
         name: Build (Maven)
         run: |
           mvn -B install --file pom.xml
-          
+
+  publish:
+    runs-on: ubuntu-latest
+    needs:
+      - build
+    environment: Release
+    steps:
+      - id: download_source
+        name: Download artifacts
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.6.1
+        with:
+          name: source
+      - name: Setup Java
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12
+        with:
+          distribution: corretto
+          java-version: 21
+          cache: maven
+      - name: Publish package
+        run: mvn -Prelease clean deploy -DskipTests
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_JIRA_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_JIRA_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+  
+  create_pr:
+    runs-on: ubuntu-latest
+    if: ${{ inputs.snapshot == false }}
+    needs:
+      - publish
+    permissions:
+      pull-requests: write
+      contents: write
+    steps:
+      - id: checkout
+        name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ env.RELEASE_COMMIT }}
+      - id: download_source
+        name: Download artifacts
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.6.1
+        with:
+          name: source
+      - id: setup-git
+        name: Git client setup and refresh tip
+        run: |
+          git config user.name "Powertools for AWS Lambda (Java) Bot"
+          git config user.email "[email protected]"
+          git config pull.rebase true
+          git config remote.origin.url >&-
+      - id: branch
+        name: Create branch
+        run: |
+          git checkout -b ci-${{ github.run_id }}
+          git commit -am "chore(ci): bump version to ${{ inputs.version }}"
+          git push origin ci-${{ github.run_id }}
+      - id: create_pr
+        name: Create PR
+        run: |
+          gh pr create \
+            --title "chore(ci): bump version to ${{ inputs.version }}" \
+            --body "This is an automated PR created from the following workflow: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - id: tag
+        name: Create release
+        run: |
+          gh release create v${{ inputs.version }} --target $(git rev-parse HEAD)
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}