Use GitHub actions for CI.

Closes gh-948

Author: mp911de

.github/workflows/ci.yml

@@ -0,0 +1,39 @@
+name: CI Build
+
+on:
+  push:
+    branches: [ main, 3.2.x, 3.1.x ]
+
+permissions: read-all
+
+jobs:
+  build:
+    name: Build project
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v5
+    - name: Set up Java
+      uses: actions/setup-java@v5
+      with:
+        java-version: '25'
+        distribution: temurin
+        cache: maven
+    - name: Cache Vault
+      uses: actions/[email protected]
+      with:
+        path: |
+          download
+          vault
+        key: ${{ runner.os }}-${{ hashFiles('src/test/bash/**') }}
+    - name: Setup Vault
+      run:  src/test/bash/start.sh
+    - name: Build
+      run: ./mvnw -B -U clean verify
+    - name: Deploy to Artifactory
+      if: ${{ github.repository == 'spring-projects/spring-vault' }}
+      env:
+        ARTIFACTORY_USR: ${{ secrets.ARTIFACTORY_USERNAME }}
+        ARTIFACTORY_PSW: ${{ secrets.ARTIFACTORY_PASSWORD }}
+        BUILD_URL: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+        BUILD_NUMBER: "${{ github.run_number }}"
+      run: ci/deploy-artifactory.sh

.github/workflows/docs-build.yml

@@ -1,4 +1,6 @@
 name: Deploy Docs Dispatch
+run-name: "${{ format('{0} Trigger', github.workflow) }}"
+
 on:
   push:
     branches-ignore: [ gh-pages ]

.github/workflows/release.yml

@@ -0,0 +1,39 @@
+name: Release to Maven Central
+run-name: "${{ format('{0} for: {1}', github.workflow, github.event.head_commit.message) }}"
+
+on:
+  push:
+    branches: [ release ]
+
+permissions: read-all
+
+jobs:
+  build:
+    name: Release project
+    runs-on: ubuntu-latest
+    if: ${{ github.repository == 'spring-projects/spring-vault' }}
+    steps:
+    - uses: actions/checkout@v5
+    - name: Set up Java
+      uses: actions/setup-java@v5
+      with:
+        java-version: '25'
+        distribution: temurin
+        cache: maven
+    - name: Cache Vault
+      uses: actions/[email protected]
+      with:
+        path: |
+          download
+          vault
+        key: ${{ runner.os }}-${{ hashFiles('src/test/bash/**') }}
+    - name: Install GPG key
+      run: |
+        echo "${{ secrets.GPG_PRIVATE_KEY }}" > gpg.asc
+        echo "${{ secrets.GPG_PASSPHRASE }}" | gpg --batch --yes --passphrase-fd 0 --import gpg.asc
+    - name: Release to Maven Central
+      env:
+          ARTIFACTORY_USR: ${{ secrets.ARTIFACTORY_USERNAME }}
+          ARTIFACTORY_PSW: ${{ secrets.ARTIFACTORY_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+      run: ci/release-to-maven-central.sh

Jenkinsfile

@@ -106,7 +106,7 @@ pipeline {
 					RELEASE_TYPE = 'snapshot'
 
 					if (PROJECT_VERSION.matches(/.*-RC[0-9]+$/) || PROJECT_VERSION.matches(/.*-M[0-9]+$/)) {
-						RELEASE_TYPE = "milestone"
+						RELEASE_TYPE = "release"
 					} else if (PROJECT_VERSION.endsWith('SNAPSHOT')) {
 						RELEASE_TYPE = 'snapshot'
 					} else if (PROJECT_VERSION.matches(/.*\.[0-9]+$/)) {

README.adoc

@@ -1,4 +1,4 @@
-= Spring Vault
+= Spring Vault link:https://github.com/spring-projects/spring-vault/actions/workflows/ci.yml[image:https://github.com/spring-projects/spring-vault/actions/workflows/ci.yml/badge.svg[CI Build]]
 
 Spring Vault provides client-side support for accessing, storing and revoking secrets.
 With https://www.vaultproject.io[HashiCorp's Vault] you have a central place to manage external secret data for applications across all environments.

ci/deploy-artifactory.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+#set -euo pipefail
+
+PROJECT_VERSION=$(./ci/get-version.sh)
+
+if [[ "$PROJECT_VERSION" == *SNAPSHOT ]]; then
+
+  echo "Deploying snapshot to Artifactory"
+  ./mvnw -s settings.xml -Pci,artifactory \
+      -Dartifactory.server=https://repo.spring.io \
+      -Dartifactory.username=${ARTIFACTORY_USR} \
+      -Dartifactory.password=${ARTIFACTORY_PSW} \
+      -Dartifactory.staging-repository=libs-snapshot-local \
+      -Dartifactory.build-name=spring-vault \
+      -Dartifactory.build-number=${BUILD_NUMBER} \
+      -Dmaven.test.skip=true \
+      clean deploy -U -B
+else
+  echo "Skipping Artifactory deployment, not a snapshot version."
+fi
+
+

ci/deploy-maven-central.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+set -euo pipefail
+
+./mvnw -s settings.xml -Pci,central,release \
+      clean deploy -U -B

ci/deploy-milestone.sh

@@ -11,12 +11,4 @@ chmod -R go-rwx $GNUPGHOME
 
 export MAVEN_GPG_PASSPHRASE="${PASSPHRASE}"
 
-MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home -Dmaven.repo.local=/tmp/jenkins-home/.m2/spring-vault" ./mvnw -s settings.xml -Pci,central,release \
-      clean deploy -U -B
-
-MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home -Dmaven.repo.local=/tmp/jenkins-home/.m2/spring-vault" ./mvnw -s settings.xml -Pdistribute \
-      -Dartifactory.server=https://repo.spring.io \
-      -Dartifactory.username=${ARTIFACTORY_USR} \
-      -Dartifactory.password=${ARTIFACTORY_PSW} \
-      -Dartifactory.staging-repository=temp-private-local \
-      clean deploy -U -B
+MAVEN_OPTS="-Duser.name=jenkins -Duser.home=/tmp/jenkins-home -Dmaven.repo.local=/tmp/jenkins-home/.m2/spring-vault" ./ci/deploy-maven-central.sh

ci/deploy-release.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -euo pipefail
+
+RAW_VERSION=`./mvnw \
+  org.apache.maven.plugins:maven-help-plugin:3.5.1:evaluate \
+  -Dexpression=project.version -q -DforceStdout`
+
+# Split things up
+VERSION_PARTS=($RAW_VERSION)
+
+# Grab the last part, which is the actual version number.
+echo ${VERSION_PARTS[${#VERSION_PARTS[@]}-1]}