Use GitHub Actions to sign and publish the artifacts

Author: ljdelight

.travis/secring.gpg .github/secring.gpg.travis/secring.gpg renamed to .github/secring.gpg

@@ -0,0 +1,32 @@
+name: Publish package to Sonatype OSS Maven2
+on:
+  release:
+    types: [created]
+    branches: [main]
+jobs:
+  publish-release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+      - uses: gradle/wrapper-validation-action@v1
+      - name: Publish maproulette-java-client
+        env:
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          # These three GPG vars are required to create the signed *.asc files used to validate each artifact
+          GPG_KEY_LOCATION: ${{ secrets.GPG_KEY_LOCATION }}
+          GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: |
+          # Remove the '-SNAPSHOT' from the version because this is a 'release' build, not a snapshot/staging build.
+          # There are gradle ways to do this based on input properties or env, but for now keep it simple
+          sed -i "s/-SNAPSHOT//g" gradle.properties
+          ./gradlew build
+          ./gradlew publish \
+            -Psigning.secretKeyRingFile=${GPG_KEY_LOCATION} \
+            -Psigning.keyId=${GPG_KEY_ID} \
+            -Psigning.password=${GPG_PASSPHRASE}

.travis/secring.gpg.enc .github/secring.gpg.enc.travis/secring.gpg.enc renamed to .github/secring.gpg.enc

@@ -0,0 +1,32 @@
+name: Publish package to Sonatype OSS Snapshots
+on:
+  workflow_run:
+    workflows: [CI Build]
+    types: [completed]
+    branches: [main, dev]
+jobs:
+  publish-snapshot:
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-java@v3
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+      - uses: gradle/wrapper-validation-action@v1
+      - name: Publish maproulette-java-client
+        env:
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+          # These three GPG vars are required to create the signed *.asc files used to validate each artifact
+          GPG_KEY_LOCATION: ${{ secrets.GPG_KEY_LOCATION }}
+          GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: |
+          ./gradlew build
+          ./gradlew publish \
+            -PpublishSnapshot=true \
+            -Psigning.secretKeyRingFile=${GPG_KEY_LOCATION} \
+            -Psigning.keyId=${GPG_KEY_ID} \
+            -Psigning.password=${GPG_PASSPHRASE}

.github/workflows/publish-release.yml

@@ -52,6 +52,8 @@ jobs:
         run: |
           pushd java-client
           ./gradlew build
+          # Publish the artifacts and pom to a local directory for later inspection
+          ./gradlew publish
 
       - name: Build maproulette-backend sbt
         run: |
@@ -87,13 +89,13 @@ jobs:
           popd
           pushd java-client
           ./gradlew --info --project-prop runIntegrationTests \
-            clean integrationTest \
+            integrationTest \
             --tests '*BatchUploaderIntegrationTest*' \
             --tests '*ChallengeAPIIntegrationTest*'
 
   validation:
     name: "Gradle Validation"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: gradle/wrapper-validation-action@v1.0.4
+      - uses: actions/checkout@v3
+      - uses: gradle/wrapper-validation-action@v1