Add Maven Central deploy to CI, cleanup Gradle leftovers

Author: zspitzer

.github/workflows/main.yml

@@ -9,7 +9,15 @@
 
 name: Build Extension
 
-on: [push, pull_request, workflow_dispatch]
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      deploy:
+        description: 'Deploy to Maven Central'
+        type: boolean
+        default: false
 
 env:
   DAP_PORT: 10000
@@ -531,3 +539,40 @@ jobs:
             debuggee/logs/
             debuggee/lucee-server/context/logs/
             debuggee/lucee-server/context/cfclasses/
+
+  # Deploy to Maven Central (manual only, requires checkbox)
+  deploy:
+    name: Deploy to Maven Central
+    runs-on: ubuntu-latest
+    needs: [test-lucee-71, test-agent]
+    if: github.event_name == 'workflow_dispatch' && inputs.deploy && github.ref == 'refs/heads/main'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          java-version: '21'
+          distribution: 'temurin'
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE
+
+      - name: Deploy extension to Maven Central
+        run: mvn -B -e clean install -Dgoal=deploy
+        env:
+          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+
+      - name: Deploy agent to Maven Central
+        working-directory: agent
+        run: mvn -B -e clean deploy -DperformRelease=true --settings maven-settings.xml
+        env:
+          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

AGENTS.md

@@ -75,6 +75,29 @@ grep -E "ERROR|Exception|Failed" test-output/run-<RUN_ID>.log
 
 Always use `test-output/` for workflow logs - it's gitignored so won't pollute the repo.
 
+## Releasing to Maven Central
+
+Versions are managed manually. Both artifacts must be updated before publishing:
+
+- Extension version: `pom.xml` → `<version>` (root pom, drives the .lex and source/java JAR)
+- Agent version: `agent/pom.xml` → `<revision>` property
+
+### Release steps
+
+1. Update versions in both pom files (remove `-SNAPSHOT` suffix)
+2. Commit the version change
+3. Go to Actions → "Build Extension" → Run workflow
+4. Tick the **"Deploy to Maven Central"** checkbox
+5. Run — the deploy job runs after all tests pass
+6. After successful publish, bump versions to next `-SNAPSHOT` and commit
+
+### Required GitHub secrets
+
+- `MAVEN_USERNAME` - Sonatype OSSRH / Central Portal username
+- `MAVEN_PASSWORD` - Sonatype OSSRH / Central Portal password/token
+- `GPG_PRIVATE_KEY` - ASCII-armoured GPG private key for signing
+- `GPG_PASSPHRASE` - Passphrase for the GPG key
+
 ## Code Style
 
 - Java 11+