Merge pull request #1597 from webauthn4j/automate-release-workflow

Automate release workflow

Author: ynojima

.github/workflows/bump-version.yml

@@ -0,0 +1,61 @@
+name: Bump version
+
+on:
+  workflow_dispatch:
+  workflow_run:
+    workflows: [release]
+    types: [completed]
+
+env:
+  JAVA_VERSION: 17
+
+jobs:
+  bump-version:
+    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
+    permissions:
+      contents: write
+
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Generate GitHub App(webauthn4j-github-app-bot) Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Set up JDK ${{ env.JAVA_VERSION }}
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: ${{ env.JAVA_VERSION }}
+          cache: 'gradle'
+
+      - name: Bump patch version
+        run: |
+          ./gradlew bumpPatchVersion
+
+      - name: Switch to snapshot
+        run: |
+          ./gradlew switchToSnapshot
+
+      - name: Update versions in documents
+        run: |
+          ./gradlew updateVersionsInDocuments
+
+      - name: Commit changes
+        run: |
+          git config user.name "webauthn4j-bot"
+          git config user.email  "info@webauthn4j.com"
+          git add .
+          git commit -m "Bump patch version"
+
+      - name: Push commit
+        run: |
+          git push

.github/workflows/release.yml

@@ -1,33 +1,68 @@
 name: Release
 
 on:
-  push:
-    tags:
-      - '*'
+  workflow_dispatch:
+
+env:
+  JAVA_VERSION: 17
 
 jobs:
-  build:
-    name: Build
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        java_version: [17]
-        os: [windows-latest]
+  release:
+    permissions:
+      contents: write
+
+    runs-on: windows-latest
 
     steps:
+      - name: Generate GitHub App(webauthn4j-github-app-bot) Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
+
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          token: ${{ steps.app-token.outputs.token }}
 
-      - name: Set up JDK ${{ matrix.java_version }}
+      - name: Set up JDK ${{ env.JAVA_VERSION }}
         uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: ${{ matrix.java_version }}
+          java-version: ${{ env.JAVA_VERSION }}
           cache: 'gradle'
 
+      - name: Switch to release
+        run: |
+          ./gradlew switchToRelease
+
       - name: Build with Gradle
         run: |
-          ./gradlew build javadoc asciidoc -PfailBuildOnCVSS=4
+          ./gradlew build javadoc asciidoc
+
+      - name: Commit changes
+        run: |
+          VERSION=$(grep "webAuthn4JCTAPVersion" gradle.properties | cut -d'=' -f2)
+          git config user.name "webauthn4j-bot"
+          git config user.email  "info@webauthn4j.com"
+          git add .
+          git commit --allow-empty -m "Release ${VERSION}"
+
+      - name: Push commit
+        run: |
+          git push
+
+      - name: Tag commit
+        run: |
+          VERSION=$(grep "webAuthn4JSpringSecurityVersion" gradle.properties | cut -d'=' -f2)
+          git tag "${VERSION}.RELEASE"
+
+      - name: Push tag
+        run: |
+          VERSION=$(grep "webAuthn4JSpringSecurityVersion" gradle.properties | cut -d'=' -f2)
+          git push origin "${VERSION}.RELEASE"
+
 
       - name: Publish to Maven Central
         env:
@@ -36,4 +71,4 @@ jobs:
           PGP_SIGNING_KEY: ${{ secrets.PGP_SIGNING_KEY }}
           PGP_SIGNING_KEY_PASSPHRASE: ${{ secrets.PGP_SIGNING_KEY_PASSPHRASE }}
         run: |
-          ./gradlew publishStandardPublicationToMavenCentralRepository
+          ./gradlew publishStandardPublicationToLocalStagingRepository jreleaserDeploy

.github/workflows/snapshot-release.yml

@@ -4,32 +4,30 @@ on:
   push:
     branches:
       - master
+env:
+  JAVA_VERSION: 17
 
 jobs:
   build:
     name: Build
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        java_version: [17]
-        os: [windows-latest]
+    runs-on: windows-latest
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up JDK ${{ matrix.java_version }}
+      - name: Set up JDK ${{ env.JAVA_VERSION }}
         uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
-          java-version: ${{ matrix.java_version }}
+          java-version: ${{ env.JAVA_VERSION }}
           cache: 'gradle'
 
       - name: Build with Gradle
         run: |
-          ./gradlew build -PfailBuildOnCVSS=4
+          ./gradlew build
 
-      - name: Publish to oss.sonatype.org snapshot
+      - name: Publish to central.sonatype.com snapshot
         env:
           MAVEN_CENTRAL_USER: ${{ secrets.MAVEN_CENTRAL_USER }}
           MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}