update workflows to better split up workflows and reusable tasks (#38)

.github/workflows/run_gradle_task.yml

@@ -0,0 +1,100 @@
+name: Gradle Task
+run-name: "Gradle Task ${{ inputs.gradle-task }} @ ${{ inputs.runs-on }}"
+
+# Reusable Workflow for running a Gradle task
+
+on:
+  workflow_dispatch:
+    inputs:
+      gradle-task:
+        description: "The Gradle task to run, including any flags"
+        required: true
+        type: string
+      runs-on:
+        description: "OS to run the task on"
+        required: true
+        type: string
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
+  workflow_call:
+    inputs:
+      gradle-task:
+        description: "The Gradle task to run, including any flags"
+        required: true
+        type: string
+      runs-on:
+        description: "OS to run the task on"
+        required: true
+        type: string
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
+
+
+concurrency:
+  # note: the Workflow inputs are also included in the concurrency group
+  group: "Gradle Task: ${{ github.workflow }} ${{ join(inputs.*) }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
+
+permissions:
+  contents: read
+  checks: write # required by mikepenz/action-junit-report
+
+
+jobs:
+
+  run-task:
+    runs-on: ${{ inputs.runs-on }}
+    name: "./gradlew ${{ inputs.gradle-task}} @ ${{ inputs.runs-on }}"
+    timeout-minutes: 60
+    steps:
+
+      ### Gradle task ###
+
+      - name: Checkout the repo
+        uses: actions/checkout@v3
+        with:
+          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+
+      - name: Validate Gradle Wrapper
+        uses: gradle/wrapper-validation-action@v1
+
+      - name: Setup JDK
+        uses: actions/setup-java@v3
+        with:
+          distribution: temurin
+          java-version: 11
+
+      - uses: gradle/gradle-build-action@v2
+        with:
+          gradle-home-cache-cleanup: true
+          arguments: ${{ inputs.gradle-task }}
+        env:
+          "ORG_GRADLE_PROJECT_signing.keyId": ${{ secrets.MAVEN_SONATYPE_SIGNING_KEY_ID }}
+          "ORG_GRADLE_PROJECT_signing.key": ${{ secrets.MAVEN_SONATYPE_SIGNING_KEY }}
+          "ORG_GRADLE_PROJECT_signing.password": ${{ secrets.MAVEN_SONATYPE_SIGNING_PASSWORD }}
+          ORG_GRADLE_PROJECT_sonatypeRepositoryUsername: ${{ secrets.MAVEN_SONATYPE_USERNAME }}
+          ORG_GRADLE_PROJECT_sonatypeRepositoryPassword: ${{ secrets.MAVEN_SONATYPE_PASSWORD }}
+
+      - name: Upload build reports
+        if: failure()
+        uses: actions/upload-artifact@v3
+        with:
+          name: build-report-${{ runner.os }}${{ github.action }}
+          path: |
+            **/build/reports/
+            **/*.hprof
+            **/*.log
+          if-no-files-found: ignore
+
+      - name: Publish Test Reports
+        uses: mikepenz/action-junit-report@v3
+        if: always()
+        with:
+          report_paths: |
+            **/build/test-results/**/TEST-*.xml
+          require_tests: false

.github/workflows/run_publish_maven.yml

@@ -0,0 +1,42 @@
+name: Publish Maven
+
+on:
+  workflow_dispatch:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
+  workflow_call:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
+
+
+concurrency:
+  group: "Publish Maven: ${{ github.workflow }}"
+  cancel-in-progress: false
+
+
+permissions:
+  contents: write
+  packages: write
+  checks: write
+
+
+jobs:
+
+  sonatype-release:
+    permissions:
+      contents: read
+      packages: write
+      checks: write
+    uses: ./.github/workflows/run_gradle_task.yml
+    secrets: inherit
+    with:
+      runs-on: macos-latest # only macOS supports building all Kotlin targets
+      gradle-task: >-
+        publishAllPublicationsToSonatypeReleaseRepository --stacktrace --no-configuration-cache --no-parallel
+      checkout-ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}

.github/workflows/deploy-site.yml → .github/workflows/run_publish_site.yml

@@ -1,14 +1,22 @@
-name: Deploy Site
+name: Publish Site
 
 on:
   workflow_dispatch:
-  push:
-    tags:
-      - "v[0-9]+.[0-9]+.[0-9]+"
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
+  workflow_call:
+    inputs:
+      checkout-ref:
+        description: "The repository reference to checkout"
+        required: false
+        type: string
 
 
 concurrency:
-  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  group: "Publish Site: ${{ github.workflow }}"
   cancel-in-progress: true
 
 
@@ -19,6 +27,11 @@ jobs:
     steps:
       - name: Checkout the repo
         uses: actions/checkout@v3
+        with:
+          ref: ${{ inputs.checkout-ref || github.event.repository.default_branch }}
+
+      - name: Validate Gradle Wrapper
+        uses: gradle/wrapper-validation-action@v1
 
       - name: Setup JDK
         uses: actions/setup-java@v3
@@ -48,4 +61,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v1
+        uses: actions/deploy-pages@v2

.github/workflows/tests.yml → .github/workflows/run_tests.yml

@@ -1,27 +1,27 @@
 name: Tests
 
 on:
-  pull_request:
   workflow_dispatch:
   workflow_call:
 
 concurrency:
-  group: "Tests on ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  group: "Tests: ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
   cancel-in-progress: true
 
 
 permissions:
   contents: read
+  checks: write # required by mikepenz/action-junit-report
 
 
 jobs:
 
   gradle-check:
     strategy:
       matrix:
-        os: [ ubuntu-latest, macos-11, windows-latest ]
+        os: [ ubuntu-latest, macos-latest, windows-latest ]
       fail-fast: false
-    uses: ./.github/workflows/gradle_task.yml
+    uses: ./.github/workflows/run_gradle_task.yml
     with:
       runs-on: ${{ matrix.os }}
       gradle-task: >-

.github/workflows/workflow_pull_request.yml

@@ -0,0 +1,21 @@
+name: Pull Requests
+
+
+on:
+  workflow_dispatch:
+  pull_request:
+  merge_group:
+
+
+concurrency:
+  group: "Pull Requests: ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
+
+jobs:
+
+  tests:
+    uses: ./.github/workflows/run_tests.yml
+    permissions:
+      contents: read
+      checks: write