add github actions

Author: wakingrufus

.github/workflows/build.yml

@@ -0,0 +1,38 @@
+name: Nebula Build
+on:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+
+jobs:
+  buildmultijdk:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # test against latest update of some major Java version(s), as well as specific LTS version(s)
+        java: [17, 21, 25]
+    name: Gradle Build without Publish
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup git user
+        run: |
+          git config --global user.name "Nebula Plugin Maintainers"
+          git config --global user.email "nebula-plugins-oss@netflix.com"
+      - name: Set up JDKs
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'zulu'
+          java-version: |
+            11
+            21
+            ${{ matrix.java }}
+          java-package: jdk
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          cache-overwrite-existing: true
+      - name: Gradle build
+        run: ./gradlew --stacktrace build
+        env:
+          JDK_VERSION_FOR_TESTS: ${{ matrix.java }}

.github/workflows/publish.yml

@@ -0,0 +1,73 @@
+name: Nebula Publish
+on:
+  push:
+    tags:
+      - v*.*.*
+      - v*.*.*-rc.*
+
+jobs:
+  validatepluginpublication:
+    runs-on: ubuntu-latest
+    name: Gradle Plugin Publication Validation
+    env:
+      NETFLIX_OSS_SONATYPE_USERNAME: ${{ secrets.ORG_SONATYPE_USERNAME }}
+      NETFLIX_OSS_SONATYPE_PASSWORD: ${{ secrets.ORG_SONATYPE_PASSWORD }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup git user
+        run: |
+          git config --global user.name "Nebula Plugin Maintainers"
+          git config --global user.email "nebula-plugins-oss@netflix.com"
+      - name: Set up JDKs
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'zulu'
+          java-version: |
+            11
+            21
+          java-package: jdk
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          cache-overwrite-existing: true
+      - name: Verify plugin publication
+        if: (!contains(github.ref, '-rc.'))
+        run: ./gradlew  --stacktrace -Dgradle.publish.key=${{ secrets.gradlePublishKey }} -Dgradle.publish.secret=${{ secrets.gradlePublishSecret }}  -Prelease.useLastTag=true final publishPlugin --validate-only -x check
+  publish:
+    if: github.event.base_ref == 'refs/heads/main' # tags must be pushed to main
+    needs: validatepluginpublication
+    runs-on: ubuntu-latest
+    name: Gradle Build and Publish
+    env:
+      NETFLIX_OSS_SONATYPE_USERNAME: ${{ secrets.ORG_SONATYPE_USERNAME }}
+      NETFLIX_OSS_SONATYPE_PASSWORD: ${{ secrets.ORG_SONATYPE_PASSWORD }}
+      NETFLIX_OSS_SIGNING_KEY: ${{ secrets.ORG_SIGNING_KEY }}
+      NETFLIX_OSS_SIGNING_PASSWORD: ${{ secrets.ORG_SIGNING_PASSWORD }}
+      NETFLIX_OSS_REPO_USERNAME: ${{ secrets.ORG_NETFLIXOSS_USERNAME }}
+      NETFLIX_OSS_REPO_PASSWORD: ${{ secrets.ORG_NETFLIXOSS_PASSWORD }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Setup git user
+        run: |
+          git config --global user.name "Nebula Plugin Maintainers"
+          git config --global user.email "nebula-plugins-oss@netflix.com"
+      - name: Set up JDKs
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'zulu'
+          java-version: |
+            11
+            21
+          java-package: jdk
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v5
+        with:
+          cache-overwrite-existing: true
+      - name: Gradle build
+        run: ./gradlew --stacktrace build
+      - name: Publish candidate
+        if: contains(github.ref, '-rc.')
+        run: ./gradlew --info --stacktrace -Prelease.useLastTag=true candidate
+      - name: Publish release
+        if: (!contains(github.ref, '-rc.'))
+        run: ./gradlew --info --stacktrace -Dgradle.publish.key=${{ secrets.gradlePublishKey }} -Dgradle.publish.secret=${{ secrets.gradlePublishSecret }} -Prelease.useLastTag=true final