release.yml

# workflow name shown in the Actions tab and PR checks
name: release

on:
  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

jobs:
  approve-release:
    environment:
      name: approval
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - run: echo 'approved'
  do-release:
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    needs:
      - approve-release
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0
      - uses: ./.github/actions/setup
      - uses: ./.github/actions/configure-git
      - name: Release with JReleaser
        run: ./gradlew jreleaserFullRelease -Dorg.gradle.daemon=false --stacktrace -x test -x integrationTest
        env:
          RELEASE_BUILD: 'true'
          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}