publish-release.yml

name: Publish Release

on:
  release:
    types: [released]

env:
  MAVEN_SNAPSHOT: false

jobs:
  publish:
    name: Publish release build
    runs-on: ubuntu-latest
    timeout-minutes: 15

    steps:
      - name: Check out code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Configure JDK 17
        uses: actions/setup-java@v4
        with:
          java-version: '17'
          distribution: 'temurin'
          cache: 'gradle'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      - name: Decrypt secrets
        run: scripts/decrypt-secrets.sh "${{ secrets.SECRETS_PASSPHRASE }}"

      - name: Build project
        run: ./gradlew clean :composenav:assembleRelease

      - name: Publish to MavenCentral
        run: ./gradlew publishReleasePublicationToSonatypeRepository closeAndReleaseSonatypeStagingRepository --max-workers 1

      - name: Clean up secrets
        if: always()
        run: scripts/cleanup-secrets.sh