From c20750dce6ff3fdf2172e5eedab7c02c255013cf Mon Sep 17 00:00:00 2001
From: kazutoiris <78157415+kazutoiris@users.noreply.github.com>
Date: Mon, 22 Sep 2025 19:09:54 +0800
Subject: [PATCH 1/2] feat(workflow): add publish release workflow

---
 .github/workflows/publish-release.yml | 124 ++++++++++++++++++++++++++
 1 file changed, 124 insertions(+)
 create mode 100644 .github/workflows/publish-release.yml

diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
new file mode 100644
index 00000000000..21d8cfe2bf4
--- /dev/null
+++ b/.github/workflows/publish-release.yml
@@ -0,0 +1,124 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+name: Publish Release
+
+on:
+  push:
+    tags:
+      - "*"
+
+jobs:
+  publish-jar:
+    name: Publish JAR
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Setup JDK 8
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: 8
+          server-id: apache.releases.https
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+          cache: maven
+
+      - name: Publish
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+        run: |
+          ./mvnw versions:set -Drevision=${{ github.ref_name }} -DgenerateBackupPoms=false
+          ./mvnw deploy --batch-mode -DskipTests -Prelease -Dmaven.javadoc.skip=true -DretryFailedDeploymentCount=10
+          mv linkis-dist/target/apache-linkis-*-bin.tar.gz .
+
+      - name: Archive git repository
+        run: |
+          git archive --format=tar.gz -o apache-linkis-${{ github.ref_name }}-src.tar.gz --prefix=apache-linkis-${{ github.ref_name }}-src/ HEAD
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: jar
+          if-no-files-found: error
+          path: |
+            apache-linkis-*-src.tar.gz
+            apache-linkis-*-bin.tar.gz
+
+  publish-web:
+    name: Publish Web
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version: 16.x
+          cache: npm
+          cache-dependency-path: linkis-web/package-lock.json
+
+      - name: Build frontend by node.js
+        run: |
+          cd linkis-web
+          npm install
+          npm run build
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: web
+          if-no-files-found: error
+          path: |
+            linkis-web/apache-linkis-*-web-bin.tar.gz
+
+  create-release:
+    name: Create Release
+    runs-on: ubuntu-latest
+    needs:
+      - publish-jar
+      - publish-web
+    steps:
+      - name: Import GPG Key
+        uses: crazy-max/ghaction-import-gpg@v3
+        with:
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+
+      - name: Download artifact
+        uses: actions/download-artifact@v5
+        with:
+          merge-multiple: true
+
+      - name: Make signatures
+        run: |
+          for i in *.tar.gz; do echo $i; gpg --armor --output $i.asc --detach-sig $i ; done
+          for i in *.tar.gz; do echo $i; sha512sum  $i > $i.sha512 ; done
+
+      - name: Create release
+        uses: softprops/action-gh-release@v2
+        with:
+          name: Apache Linkis Release-${{ github.ref_name }}
+          draft: true
+          files: "*"

From ca7eb2299f460d8cd0eeef6d5bcf33f4d7bb3d15 Mon Sep 17 00:00:00 2001
From: kazutoiris <78157415+kazutoiris@users.noreply.github.com>
Date: Mon, 22 Sep 2025 20:15:16 +0800
Subject: [PATCH 2/2] ci: upgrade `maven-gpg-plugin` version and configure
 pinentry mode

---
 pom.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index e70cf069194..42bf57b7b57 100644
--- a/pom.xml
+++ b/pom.xml
@@ -246,7 +246,7 @@
     <assembly.package.rootpath>${basedir}</assembly.package.rootpath>
     <maven-enforcer-plugin.version>3.0.0</maven-enforcer-plugin.version>
     <maven-javadoc-plugin.version>3.0.1</maven-javadoc-plugin.version>
-    <maven-gpg-plugin.version>1.5</maven-gpg-plugin.version>
+    <maven-gpg-plugin.version>1.6</maven-gpg-plugin.version>
     <maven-source-plugin.version>3.2.1</maven-source-plugin.version>
     <maven-resources-plugin.version>3.0.1</maven-resources-plugin.version>
     <apache-rat-plugin.version>0.13</apache-rat-plugin.version>
@@ -1944,6 +1944,12 @@
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
             <version>${maven-gpg-plugin.version}</version>
+            <configuration>
+              <gpgArguments>
+                <arg>--pinentry-mode</arg>
+                <arg>loopback</arg>
+              </gpgArguments>
+            </configuration>
             <executions>
               <execution>
                 <id>sign-artifacts</id>