callable.publish-sonatype.yml

name: Publish to Sonatype (Maven Central)
on:
  workflow_call:

jobs:
  publish:
    name: gradle publish (Maven Central)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout project sources
        uses: actions/checkout@v5

      - uses: actions/setup-java@v5
        with:
          distribution: 'corretto'
          java-version: '21'
      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4.4.3
        with:
          cache-read-only: true

      # note the following two steps are identical but different names for better DX in GitHub Actions UI
      - name: Publish SNAPSHOT to Sonatype (Maven Central)
        if: github.ref == 'refs/heads/main'
        run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository
        env:
          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
          GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
      - name: Publish RELEASE to Sonatype (Maven Central)
        if: github.ref_type == 'tag'
        run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository
        env:
          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
          GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}