publish-artifacts.yml

name: Publish Artifacts

# Tags are automatically published
#
# Manual publishing (workflow_dispatch) from the main branch is also supported
#
# Separate from main test running, because we assume that anything you push a
# tag for or trigger manually would already have passed tests, so no need to run
# them again and deal with slowness and flakiness twice.

on:
  push:
    tags:
      - '**'
  workflow_dispatch:

# cancel older runs of a pull request;
# this will not cancel anything for normal git pushes
concurrency:
  group: cancel-old-pr-runs-${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  build-artifacts:
    # when in master repo, publish all tags and manual runs on main
    if: github.repository == 'com-lihaoyi/mill'
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with: {fetch-depth: 0}

      - uses: coursier/cache-action@v6

      - uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: temurin

      - run: ./mill -i __.publishArtifacts

      - uses: actions/upload-artifact@v4.4.3
        with:
          path: .
          include-hidden-files: true

  publish-sonatype:
    # when in master repo, publish all tags and manual runs on main
    if: github.repository == 'com-lihaoyi/mill'
    needs: build-artifacts
    runs-on: ubuntu-latest

    # only run one publish job for the same sha at the same time
    # e.g. when a main-branch push is also tagged
    concurrency: publish-sonatype-${{ github.sha }}

    env:
      MILL_SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
      MILL_SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
      MILL_PGP_SECRET_BASE64: ${{ secrets.SONATYPE_PGP_SECRET }}
      MILL_PGP_PASSPHRASE: ${{ secrets.SONATYPE_PGP_PASSWORD }}
      LANG: "en_US.UTF-8"
      LC_MESSAGES: "en_US.UTF-8"
      LC_ALL: "en_US.UTF-8"

    steps:
      - uses: actions/download-artifact@v4
        with:
          path: .

      - uses: coursier/cache-action@v6

      - uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: temurin

      - run: ./mill -i mill.scalalib.PublishModule/

  release-github:
    # when in master repo, publish all tags and manual runs on main
    if: github.repository == 'com-lihaoyi/mill'
    needs: publish-sonatype
    runs-on: ubuntu-latest

    env:
      REPO_ACCESS_TOKEN: ${{ secrets.REPO_ACCESS_TOKEN }}

    steps:
      - uses: actions/download-artifact@v4
        with:
          path: .

      - uses: coursier/cache-action@v6

      - uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: temurin

      - run: ./mill -i dist.uploadToGithub --authKey $REPO_ACCESS_TOKEN