ci: only publish from tags that are on main #398

	name: ci

	on: [push]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: false

	jobs:
	compile:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repo
	uses: actions/checkout@v4

	- name: Set up Java
	id: setup-jre
	uses: actions/setup-java@v1
	with:
	java-version: "11"
	architecture: x64

	- name: Compile
	run: ./gradlew compileJava

	test:
	needs: [ compile ]
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repo
	uses: actions/checkout@v4

	- name: Set up Java
	id: setup-jre
	uses: actions/setup-java@v1
	with:
	java-version: "11"
	architecture: x64

	- name: Test
	run: ./gradlew test
	publish:
	needs: [ compile, test ]
	if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repo
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Ensure tag is on main
	run: git merge-base --is-ancestor "$GITHUB_SHA" origin/main

	- name: Set up Java
	id: setup-jre
	uses: actions/setup-java@v1
	with:
	java-version: "11"
	architecture: x64

	- name: Publish to maven
	run: \|
	./gradlew sonatypeCentralUpload
	env:
	MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
	MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
	MAVEN_PUBLISH_REGISTRY_URL: "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
	MAVEN_SIGNATURE_KID: ${{ secrets.MAVEN_SIGNATURE_KID }}
	MAVEN_SIGNATURE_SECRET_KEY: ${{ secrets.MAVEN_SIGNATURE_SECRET_KEY }}
	MAVEN_SIGNATURE_PASSWORD: ${{ secrets.MAVEN_SIGNATURE_PASSWORD }}

Navigation Menu