cd.yaml

name: CD
on:
  push:
    branches:
    - master
  workflow_call:
    inputs:
      skip_github_release:
        description: 'Skip creating a GitHub release'
        type: boolean
        default: false
jobs:
  extract_version:
    runs-on: ubuntu-latest
    name: Extract release version
    outputs:
      version: ${{ steps.version.outputs.value }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v5
      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '22.x'
      - name: Get package version
        id: version
        run: echo "value=$(node -p -e "require('./px_metadata.json').version")" >> "$GITHUB_OUTPUT"

  create_release:
    runs-on: ubuntu-latest
    needs: extract_version
    name: Create release on GitHub
    if: ${{ github.event_name == 'push' || inputs.skip_github_release == false }}
    permissions:
      contents: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v5
      - run: gh release create v${{ needs.extract_version.outputs.version }} --generate-notes -t "Version ${{ needs.extract_version.outputs.version }}"
        env:
          GITHUB_TOKEN: ${{ github.TOKEN }}
        shell: bash
        name: Creates a release in GitHub

  publish:
    name: Deploy to maven
    needs:
      - extract_version
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Import GPG key
        run: echo -n "$GPG_SIGNING_KEY" | base64 --decode | gpg --import --passphrase "$GPG_PASSPHRASE"
        env:
          # To generate a new GPG key run the following command in your local terminal:
          # gpg --export-secret-keys -a "<key_id>" | base64
          GPG_SIGNING_KEY: ${{ secrets.GPG_SIGNING_KEY }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
      - name: Log GPG keys
        run: gpg --list-secret-keys --keyid-format LONG

      - name: Deploy a new version
        run: mvn clean deploy -P build-extras,sign --settings deploy/mvnsettings.xml -pl perimeterx-sdk,perimeterx-sdk-jakarta -am -DskipTests
        env:
          GPG_KEY_NAME: ${{ vars.GPG_KEY_NAME }}
          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
          OSSRH_JIRA_USERNAME: ${{ secrets.OSSRH_JIRA_USERNAME }}
          OSSRH_JIRA_PASSWORD: ${{ secrets.OSSRH_JIRA_PASSWORD }}