Release #21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## | |
| ## Copyright (C) 2025 Dremio Corporation | |
| ## | |
| ## Licensed under the Apache License, Version 2.0 (the "License"); | |
| ## you may not use this file except in compliance with the License. | |
| ## You may obtain a copy of the License at | |
| ## | |
| ## http://www.apache.org/licenses/LICENSE-2.0 | |
| ## | |
| ## Unless required by applicable law or agreed to in writing, software | |
| ## distributed under the License is distributed on an "AS IS" BASIS, | |
| ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| ## See the License for the specific language governing permissions and | |
| ## limitations under the License. | |
| ## | |
| name: Release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| releaseVersion: | |
| description: 'Release version (e.g., 0.1.0)' | |
| required: true | |
| nextVersion: | |
| description: 'Next development version (e.g., 0.1.1 - the suffix -SNAPSHOT will be added automatically)' | |
| required: true | |
| dryRun: | |
| description: 'Dry run (true or false)' | |
| required: false | |
| default: false | |
| type: boolean | |
| # Required permissions for pushing to main branch and creating tags, issues and discussions | |
| permissions: | |
| contents: write | |
| packages: write | |
| # TODO enable | |
| # issues: write | |
| # discussions: write | |
| jobs: | |
| release: | |
| name: "Release version ${{ inputs.releaseVersion }} (dry run: ${{ inputs.dryRun }})" | |
| # Only run in the original repository, not forks | |
| if: github.repository == 'dremio/iceberg-auth-manager' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Validate inputs | |
| run: | | |
| if [[ "${{ github.event.inputs.releaseVersion }}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+)?$ && ! "${{ github.event.inputs.releaseVersion }}" =~ -SNAPSHOT$ ]]; then | |
| RELEASE_VERSION="${{ github.event.inputs.releaseVersion }}" | |
| echo RELEASE_VERSION="${RELEASE_VERSION}" >> $GITHUB_ENV | |
| echo TAG_NAME="authmgr-${RELEASE_VERSION}" >> $GITHUB_ENV | |
| echo "Release version: $RELEASE_VERSION" | |
| else | |
| echo "Invalid release version format. Expected format: x.y.z or x.y.z-qualifier" | |
| exit 1 | |
| fi | |
| if [[ "${{ github.event.inputs.nextVersion }}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9]+)?$ && ! "${{ github.event.inputs.nextVersion }}" =~ -SNAPSHOT$ ]]; then | |
| NEXT_VERSION="${{ github.event.inputs.nextVersion }}-SNAPSHOT" | |
| echo NEXT_VERSION="${NEXT_VERSION}" >> $GITHUB_ENV | |
| echo "Next development version: $NEXT_VERSION" | |
| else | |
| echo "Invalid next development version format. Expected format: x.y.z or x.y.z-qualifier" | |
| exit 1 | |
| fi | |
| # The access token is valid for (only) one hour. See https://github.com/actions/create-github-app-token for details. | |
| - name: Generate access token | |
| id: generate-token | |
| uses: actions/create-github-app-token@v2 | |
| with: | |
| app-id: ${{ vars.DREMIO_RELEASE_BOT_APP_ID }} | |
| private-key: ${{ secrets.DREMIO_RELEASE_BOT_PRIVATE_KEY }} | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| token: ${{ steps.generate-token.outputs.token }} | |
| fetch-depth: 0 # Fetch all history for all branches and tags | |
| ref: main # Checkout the main branch | |
| - name: Verify current version | |
| run: | | |
| if [[ ! -f version.txt ]]; then | |
| echo "version.txt file not found!" | |
| exit 1 | |
| fi | |
| current_version=$(cat version.txt) | |
| if [[ ! "$current_version" =~ -SNAPSHOT$ ]]; then | |
| echo "Current version is not a SNAPSHOT version: $current_version" | |
| exit 1 | |
| fi | |
| - name: Configure Git | |
| # See https://github.com/actions/checkout/blob/main/README.md#push-a-commit-using-the-built-in-token | |
| run: | | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" | |
| git remote set-url --push origin https://x-access-token:${{ steps.generate-token.outputs.token }}@github.com/${{ github.repository }} | |
| - name: Update version for release | |
| run: | | |
| echo "${RELEASE_VERSION}" > version.txt | |
| git add version.txt | |
| git commit -a -m "chore(release): release version ${RELEASE_VERSION}" | |
| git tag -a -m "chore(release): tag version ${RELEASE_VERSION}" ${TAG_NAME} | |
| - name: Push tag | |
| run: | | |
| if [[ "${{ github.event.inputs.dryRun }}" == "false" ]]; then | |
| echo "Pushing tag ${TAG_NAME}." | |
| git push origin ${TAG_NAME} | |
| else | |
| echo "Dry run enabled, not pushing tag." | |
| fi | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: 21 | |
| - name: Build with Gradle | |
| run: ./gradlew --no-scan build publish -x intTest -Prelease | |
| - name: Print POMs names and contents | |
| run: | | |
| find . -path "*/build/staging-deploy/*" -name "*.pom" -exec sh -c 'echo ----; echo POM file: {}; cat {}' \; | |
| - name: JReleaser full release | |
| env: | |
| JRELEASER_DRY_RUN: ${{ github.event.inputs.dryRun }} | |
| JRELEASER_TAG_NAME: ${TAG_NAME} | |
| JRELEASER_MAVENCENTRAL_STAGE: FULL | |
| JRELEASER_GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }} | |
| JRELEASER_MAVENCENTRAL_USERNAME: ${{ secrets.DEVBOT_CENTRAL_USERNAME }} | |
| JRELEASER_MAVENCENTRAL_PASSWORD: ${{ secrets.DEVBOT_CENTRAL_PASSWORD }} | |
| JRELEASER_GPG_PASSPHRASE: ${{ secrets.DEVBOT_GPG_PASSPHRASE }} | |
| JRELEASER_GPG_SECRET_KEY: ${{ secrets.DEVBOT_GPG_PRIVATE_KEY }} | |
| run: ./gradlew --no-scan jreleaserFullRelease --info | |
| - name: Update to next development version | |
| run: | | |
| echo "${NEXT_VERSION}" > version.txt | |
| git add version.txt | |
| git commit -m "chore(release): set next development version to ${NEXT_VERSION}" | |
| - name: Push main branch | |
| run: | | |
| if [[ "${{ github.event.inputs.dryRun }}" == "false" ]]; then | |
| echo "Pushing changes to main branch." | |
| git push origin main | |
| else | |
| echo "Dry run enabled, not pushing to main branch." | |
| fi | |
| - name: Print JReleaser information | |
| if: always() | |
| run: | | |
| if [ -f build/jreleaser/output.properties ]; then | |
| echo "JReleaser output properties:" | |
| cat build/jreleaser/output.properties | |
| else | |
| echo "No JReleaser output properties found." | |
| fi | |
| if [ -f build/jreleaser/trace.log ]; then | |
| echo "JReleaser logs:" | |
| cat build/jreleaser/trace.log | |
| else | |
| echo "No JReleaser logs found." | |
| fi |