Merge pull request #4 from protegeproject/feature/startup-entrypoint #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.actor != 'protegeproject-bot[bot]' }} | |
| outputs: | |
| version: ${{ steps.release-outputs.outputs.version }} | |
| service: ${{ steps.release-outputs.outputs.service }} | |
| steps: | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{secrets.DOCKER_USERNAME}} | |
| password: ${{secrets.DOCKER_PASSWORD}} | |
| - uses: actions/create-github-app-token@v1 | |
| id: app-token | |
| with: | |
| app-id: ${{ vars.PROTEGEPROJECT_BOT_APP_ID }} | |
| private-key: ${{ secrets.PROTEGEPROJECT_BOT_APP_PRIVATE_KEY }} | |
| - uses: actions/checkout@v4 | |
| with: | |
| token: ${{ steps.app-token.outputs.token }} | |
| ref: ${{ github.head_ref }} | |
| - name: Set up Maven Central Repository | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: '17' | |
| distribution: 'adopt' | |
| server-id: docker.io | |
| server-username: DOCKER_USERNAME | |
| server-password: DOCKER_PASSWORD | |
| # Read the version from pom.xml and strip the -SNAPSHOT suffix to | |
| # produce the release version. For example, 2.0.0-SNAPSHOT becomes | |
| # 2.0.0. If there is no -SNAPSHOT suffix the version is used as-is. | |
| - name: Determine release version | |
| id: release-version | |
| run: | | |
| current_version=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout) | |
| echo "Current pom version: $current_version" | |
| release_version=$(echo "$current_version" | sed -E 's/-SNAPSHOT$//') | |
| echo "Release version: $release_version" | |
| echo "release_version=$release_version" >> $GITHUB_OUTPUT | |
| # Set pom.xml to the release version (without -SNAPSHOT), commit, | |
| # and tag. This is the commit that the Docker image is built from. | |
| - name: Set release version in pom.xml | |
| run: | | |
| find . -name 'pom.xml' -exec mvn versions:set \ | |
| -DnewVersion=${{ steps.release-version.outputs.release_version }} \ | |
| -DgenerateBackupPoms=false -f {} \; | |
| - name: Commit and tag release | |
| run: | | |
| git config --global user.name "github-actions[bot]" | |
| git config --global user.email "github-actions[bot]@users.noreply.github.com" | |
| git add . | |
| # If the pom already had the release version (no -SNAPSHOT suffix), | |
| # there is nothing to commit — just tag the current HEAD. | |
| git diff --cached --quiet || \ | |
| git commit -m "Release ${{ steps.release-version.outputs.release_version }}" | |
| git tag ${{ steps.release-version.outputs.release_version }} | |
| git push origin HEAD:${GITHUB_REF##*/} | |
| git push origin ${{ steps.release-version.outputs.release_version }} | |
| - name: Build Docker image | |
| run: mvn --batch-mode package | |
| - name: Run entrypoint integration test | |
| run: ./test-entrypoint.sh protegeproject/webprotege-keycloak:${{ steps.release-version.outputs.release_version }} | |
| - name: Push Docker image | |
| run: docker push protegeproject/webprotege-keycloak:${{ steps.release-version.outputs.release_version }} | |
| - name: Release | |
| uses: softprops/action-gh-release@v1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| tag_name: ${{ steps.release-version.outputs.release_version }} | |
| generate_release_notes: true | |
| # After the release, bump the patch version and add -SNAPSHOT to | |
| # prepare the pom for the next development cycle. For example, | |
| # after releasing 2.0.0 the pom is set to 2.0.1-SNAPSHOT. | |
| - name: Prepare next development version | |
| run: | | |
| released=${{ steps.release-version.outputs.release_version }} | |
| IFS='.' read -r -a parts <<< "$released" | |
| parts[2]=$((parts[2] + 1)) | |
| next_snapshot="${parts[0]}.${parts[1]}.${parts[2]}-SNAPSHOT" | |
| echo "Next development version: $next_snapshot" | |
| find . -name 'pom.xml' -exec mvn versions:set \ | |
| -DnewVersion=$next_snapshot \ | |
| -DgenerateBackupPoms=false -f {} \; | |
| git add . | |
| git commit -m "Prepare next development version ($next_snapshot)" | |
| git push origin HEAD:${GITHUB_REF##*/} | |
| - name: Set outputs | |
| id: release-outputs | |
| run: | | |
| echo "version=${{ steps.release-version.outputs.release_version }}" >> $GITHUB_OUTPUT | |
| echo "service=webprotege-keycloak" >> $GITHUB_OUTPUT | |
| notify-bump: | |
| needs: build | |
| uses: ./.github/workflows/notify-deploy-project.yaml | |
| with: | |
| version: ${{ needs.build.outputs.version }} | |
| service: ${{ needs.build.outputs.service }} | |
| branch_var: ${{vars.BUMP_WEBPROTEGE_BRANCH}} | |
| secrets: | |
| PROTEGE_PROJECT_CLIENT_ID: ${{ secrets.PROTEGE_PROJECT_CLIENT_ID }} | |
| PROTEGE_PROJECT_CLIENT_SECRET: ${{ secrets.PROTEGE_PROJECT_CLIENT_SECRET }} | |
| env: | |
| DOCKER_USERNAME: ${{secrets.DOCKER_USERNAME}} | |
| DOCKER_TOKEN: ${{secrets.DOCKER_PASSWORD}} |