update publish action to use Publish environment

Author: wakingrufus

.github/workflows/publish.yml

@@ -6,38 +6,13 @@ on:
       - v*.*.*-rc.*
 
 jobs:
-  validatepluginpublication:
-    runs-on: ubuntu-latest
-    name: Gradle Plugin Publication Validation
-    env:
-      NETFLIX_OSS_SONATYPE_USERNAME: ${{ secrets.ORG_SONATYPE_USERNAME }}
-      NETFLIX_OSS_SONATYPE_PASSWORD: ${{ secrets.ORG_SONATYPE_PASSWORD }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup git user
-        run: |
-          git config --global user.name "Nebula Plugin Maintainers"
-          git config --global user.email "[email protected]"
-      - name: Set up JDKs
-        uses: actions/setup-java@v4
-        with:
-          distribution: 'zulu'
-          java-version: |
-            11
-            21
-          java-package: jdk
-      - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
-        with:
-          cache-overwrite-existing: true
-      - name: Verify plugin publication
-        if: (!contains(github.ref, '-rc.'))
-        run: ./gradlew  --stacktrace -Dgradle.publish.key=${{ secrets.gradlePublishKey }} -Dgradle.publish.secret=${{ secrets.gradlePublishSecret }}  -Prelease.useLastTag=true final publishPlugin --validate-only -x check
   publish:
     if: github.event.base_ref == 'refs/heads/main' # tags must be pushed to main
-    needs: validatepluginpublication
     runs-on: ubuntu-latest
     name: Gradle Build and Publish
+    environment:
+      name: Publish
+      url: "https://repo1.maven.org/maven2/com/netflix/nebula/nebula-archrules-core/"
     env:
       NETFLIX_OSS_SONATYPE_USERNAME: ${{ secrets.ORG_SONATYPE_USERNAME }}
       NETFLIX_OSS_SONATYPE_PASSWORD: ${{ secrets.ORG_SONATYPE_PASSWORD }}
@@ -65,6 +40,9 @@ jobs:
           cache-overwrite-existing: true
       - name: Gradle build
         run: ./gradlew --stacktrace build
+      - name: Verify plugin publication
+        if: (!contains(github.ref, '-rc.'))
+        run: ./gradlew  --stacktrace -Dgradle.publish.key=${{ secrets.gradlePublishKey }} -Dgradle.publish.secret=${{ secrets.gradlePublishSecret }}  -Prelease.useLastTag=true final publishPlugin --validate-only -x check
       - name: Publish candidate
         if: contains(github.ref, '-rc.')
         run: ./gradlew --info --stacktrace -Prelease.useLastTag=true candidate