Publish & Release SDK #21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish & Release SDK | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| cab_id: | |
| description: "CAB id for the change/release" | |
| required: true | |
| type: string | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| environment: prod | |
| outputs: | |
| release_number: ${{steps.get_latest_release_number.outputs.release_tag}} | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout Xero-Java repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: XeroAPI/Xero-Java | |
| path: Xero-Java | |
| - name: Set up JDK environment | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '11' | |
| cache: maven | |
| server-id: ossrh | |
| server-username: MAVEN_USERNAME | |
| server-password: MAVEN_PASSWORD | |
| gpg-passphrase: GPG_PASSPHRASE | |
| - name: Fetch Latest release number | |
| id: get_latest_release_number | |
| run: | | |
| latest_version=$(gh release view --json tagName --jq '.tagName') | |
| echo "Latest release version is - $latest_version" | |
| echo "::set-output name=release_tag::$latest_version" | |
| working-directory: Xero-Java | |
| env: | |
| GH_TOKEN: ${{secrets.GITHUB_TOKEN}} | |
| - name: Import GPG Key | |
| run: | | |
| echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import | |
| env: | |
| GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY}} | |
| - name: Publish to OSSRH Staging API | |
| run: | | |
| export GPG_TTY=$(tty) | |
| mvn clean deploy -DskipTests=true | |
| env: | |
| MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }} | |
| MAVEN_PASSWORD: ${{ secrets.MAVEN_TOKEN }} | |
| GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} | |
| working-directory: Xero-Java | |
| # This needs to run from the same IP address that the mvn deploy ran on. | |
| # Once this is complete you will need to log in to https://central.sonatype.com/publishing | |
| # to finish the publish. We can supply publishing_type as 'automatic' instead to skip this step. | |
| # See docs: https://central.sonatype.org/publish/publish-portal-ossrh-staging-api | |
| - name: OSSRH Staging API publish | |
| run: | | |
| curl -i -X POST -u "$MAVEN_USERNAME:$MAVEN_PASSWORD" https://ossrh-staging-api.central.sonatype.com/manual/upload/defaultRepository/com.github.xeroapi?publishing_type=user_managed | |
| env: | |
| MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }} | |
| MAVEN_PASSWORD: ${{ secrets.MAVEN_TOKEN }} | |
| working-directory: Xero-Java | |
| notify-slack-on-success: | |
| runs-on: ubuntu-latest | |
| needs: publish | |
| if: success() | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout Xero-Java repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: XeroAPI/Xero-Java | |
| path: Xero-Java | |
| - name: Send slack notification on success | |
| uses: ./Xero-Java/.github/actions/notify-slack | |
| with: | |
| heading_text: "Publish job has succeeded !" | |
| alert_type: "thumbsup" | |
| job_status: "Success" | |
| XERO_SLACK_WEBHOOK_URL: ${{secrets.XERO_SLACK_WEBHOOK_URL}} | |
| job_url: "https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}" | |
| button_type: "primary" | |
| package_version: ${{needs.publish.outputs.release_number}} | |
| repo_link: ${{github.server_url}}/${{github.repository}} | |
| notify-slack-on-failure: | |
| runs-on: ubuntu-latest | |
| needs: publish | |
| if: failure() | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout Xero-Java repo | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: XeroAPI/Xero-Java | |
| path: Xero-Java | |
| - name: Send slack notification on failure | |
| uses: ./Xero-Java/.github/actions/notify-slack | |
| with: | |
| heading_text: "Publish job has failed !" | |
| alert_type: "alert" | |
| job_status: "Failed" | |
| XERO_SLACK_WEBHOOK_URL: ${{secrets.XERO_SLACK_WEBHOOK_URL}} | |
| job_url: "https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}" | |
| button_type: "danger" | |
| package_version: ${{needs.publish.outputs.release_number}} | |
| repo_link: ${{github.server_url}}/${{github.repository}} | |
| notify-codegen-repo: | |
| needs: publish | |
| if: always() | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: XeroAPI/Xero-Java | |
| path: Xero-Java | |
| - name: Install octokit dependencies | |
| run: npm i | |
| working-directory: Xero-Java/.github/octokit | |
| - name: Get github app access token | |
| id: get_access_token | |
| env: | |
| GITHUB_APP_ID: ${{ secrets.XERO_CODEGEN_BOT_APPLICATION_ID }} | |
| GITHUB_APP_PRIVATE_KEY: ${{ secrets.XERO_CODEGEN_BOT_APPLICATION_KEY }} | |
| uses: actions/github-script@v7 | |
| with: | |
| result-encoding: string | |
| script: | | |
| const { getAccessToken } = await import('${{ github.workspace }}/Xero-Java/.github/octokit/index.js') | |
| const token = await getAccessToken() | |
| return token | |
| - name: Notify codegen repo | |
| run: | | |
| curl -X POST -H "Authorization: token ${{ steps.get_access_token.outputs.result }}" \ | |
| -H "Accept: application/vnd.github.v3+json" \ | |
| -H "Content-Type: application/json" \ | |
| https://api.github.com/repos/xero-internal/xeroapi-sdk-codegen/actions/workflows/notify-sdk-publish.yml/dispatches \ | |
| -d '{ | |
| "ref": "master", | |
| "inputs": { | |
| "commit": "${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}", | |
| "status": "${{needs.publish.result}}", | |
| "deployer": "xero-codegen-bot", | |
| "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", | |
| "environment": "prod", | |
| "sdk_type": "java", | |
| "cab_key": "${{ github.event.inputs.cab_id }}" | |
| } | |
| }' |