release.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      branch:
        description: Release branch (needed for major and minor releases)
        required: true
      version:
        description: Release version
        required: true
      deploy-skip:
        description: Set to true to prevent maven deploy plugin to actually deploy the artifacts.
        required: true
        default: false

concurrency: rel-${{ github.ref }}

defaults:
  run:
    shell: bash

jobs:

  repo:
    runs-on: ubuntu-latest
    steps:
      - name: show-inputs
      - run: |
          echo "Version: ${{ inputs.version }}  " >> $GITHUB_STEP_SUMMARY
          echo "Release branch: ${{ inputs.branch }}  " >> $GITHUB_STEP_SUMMARY
          echo "Workflow branch: ${{ github.ref_name }}  " >> $GITHUB_STEP_SUMMARY
          echo "Deploy skip: ${{ inputs.deploy-skip }}  " >> $GITHUB_STEP_SUMMARY
      - name: checkout
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.branch }}

  env:
    uses: ./.github/workflows/x-env.yml
    needs: [repo]

  create-tags:
    name: Create tags
    needs: [repo, env]
    uses: ./.github/workflows/x-create-tags.yml
    with:
      tag: ${{ github.event.inputs.version }}
      branch: ${{ github.event.inputs.branch }}
      set-versions: true
    secrets:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  keycloak-client:
    name: Keycloak Client
    needs: [repo, env, create-tags]
    uses: ./.github/workflows/x-keycloak-client.yml
    with:
      mvn-url: ${{ needs.env.outputs.mvn-releases-url }}
      tag: ${{ github.event.inputs.version }}
      deploy-skip: ${{ needs.env.outputs.deploy-skip }}
    secrets:
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      MVN_USERNAME: ${{ secrets.MVN_USERNAME }}
      MVN_TOKEN: ${{ secrets.MVN_TOKEN }}
      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
      GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}