chore: Automate maven release (#4)

* chore: Automate Maven Release

Author: ColinKYuen

.github/workflows/maven_release.yml

@@ -0,0 +1,39 @@
+name: 'Release to Maven'
+
+on:
+  release:
+    types:
+      - published
+
+jobs:
+  ubuntu-latest-aurora-release-to-maven:
+    name: 'Build And Release to Maven'
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'Clone Repository'
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 50
+      - name: 'Set up JDK 8'
+        uses: actions/setup-java@v1
+        with:
+          java-version: 8
+      - name: 'Build Driver'
+        run: |
+          ./gradlew --no-parallel --no-daemon -x test assemble
+      - name: "Decode Key Ring"
+        run: |
+          echo "${{secrets.GPG_SECRET_KEY_FILE}}" > ~/.gradle/secring.gpg.b64
+          base64 -d ~/.gradle/secring.gpg.b64 > ~/.gradle/secring.gpg
+      - name: 'Install GPG Secret Key'
+        id: import_gpg
+        uses: crazy-max/ghaction-import-gpg@v4
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+      - name: 'Publish to Maven'
+        run: |
+          ./gradlew --no-parallel --no-daemon publishAllPublicationsToOSSRHRepository -Psigning.keyId=${{secrets.GPG_KEY_ID}} -Psigning.password=${{secrets.GPG_PASSPHRASE}} -Psigning.secretKeyRingFile=$(echo ~/.gradle/secring.gpg)
+        env:
+          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}

.github/workflows/release.yml renamed to .github/workflows/release_draft.yml

@@ -1,9 +1,9 @@
-name: 'Release Driver'
+name: 'Release Draft'
 
 on:
   push:
     tags:
-      - '*'
+      - '[0-9]+.[0-9]+.[0-9]+'
 
 permissions:
   actions: write
@@ -29,7 +29,7 @@ jobs:
         S3_BUILD_CACHE_SECRET_KEY: ${{ secrets.S3_BUILD_CACHE_SECRET_KEY }}
       with:
         job-id: jdk8
-        arguments: --no-parallel --no-daemon jandex -x test build
+        arguments: --no-parallel --no-daemon jandex -x test assemble
     - name: 'Set Version Env Variable'
       run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
     - name: 'Get Release Details'

build.gradle.kts

@@ -18,6 +18,7 @@ import org.postgresql.buildtools.JavaCommentPreprocessorTask
 
 plugins {
     publishing
+    signing
     // Verification
     checkstyle
     jacoco
@@ -287,7 +288,7 @@ allprojects {
             // Some of the projects might fail to create a file (e.g. no tests or no coverage),
             // So we check for file existence. Otherwise JacocoMerge would fail
             val execFiles =
-                    files(testTasks, javaExecTasks).filter { it.exists() && it.name.endsWith(".exec") }
+                files(testTasks, javaExecTasks).filter { it.exists() && it.name.endsWith(".exec") }
             executionData(execFiles)
         }
 
@@ -550,8 +551,8 @@ allprojects {
                     }
                 }
                 for (p in listOf("server", "port", "database", "username", "password",
-                        "privilegedUser", "privilegedPassword",
-                        "simpleProtocolOnly", "enable_ssl_tests")) {
+                    "privilegedUser", "privilegedPassword",
+                    "simpleProtocolOnly", "enable_ssl_tests")) {
                     passProperty(p)
                 }
             }
@@ -610,13 +611,25 @@ allprojects {
                             forEach { artifact(it) }
                         }
                     }
+
+                    apply(plugin = "signing")
+                    signing {
+                        if (project.hasProperty("signing.keyId") &&
+                            project.property("signing.keyId") != "" &&
+                            project.hasProperty("signing.password") &&
+                            project.property("signing.password") != "" &&
+                            project.hasProperty("signing.secretKeyRingFile") &&
+                            project.property("signing.secretKeyRingFile") != "") {
+                            sign(publishing.publications[project.name])
+                        }
+                    }
                 }
                 // </editor-fold>
                 // <editor-fold defaultstate="collapsed" desc="Configuration of the published pom.xml">
                 create<MavenPublication>(project.name) {
                     groupId = "software.aws.rds"
                     artifactId = "aws-postgresql-jdbc"
-                    version = "0.1.0"
+                    version = buildVersion
                     from(components["java"])
 
                     // Gradle feature variants can't be mapped to Maven's pom
@@ -654,6 +667,18 @@ allprojects {
                 }
                 // </editor-fold>
             }
+            repositories {
+                maven {
+                    name = "OSSRH"
+                    url = uri("https://aws.oss.sonatype.org/service/local/staging/deploy/maven2/")
+                    credentials {
+                        username = System.getenv("MAVEN_USERNAME")
+                        password = System.getenv("MAVEN_PASSWORD")
+                    }
+                }
+
+                mavenLocal()
+            }
         }
     }
 }

pgjdbc/build.gradle.kts

@@ -210,7 +210,6 @@ tasks.shadowJar {
 
 tasks.register<Jar>("cleanShadowJar") {
 
-    archiveClassifier.set("all")
     dependsOn("shadowJar")
     includeEmptyDirs = false