AAE-26208 Manual release workflow adjustments (#2330)

AAE-26208 Adjustments

.github/workflows/release.yml

@@ -1,4 +1,4 @@
-name: Dispatch Workflow
+name: Manual release dispatch workflow
 
 on:
   workflow_dispatch:
@@ -24,19 +24,37 @@ on:
         required: true
         default: 'v7.19.0-alpha.93'
 
+env:
+  MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+  MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
+  MAVEN_CLI_OPTS: >-
+    --settings settings.xml
+    -V --no-transfer-progress -Dspring.main.banner-mode=off -Ddoclint=none
+    -Denvironment.host=${{ vars.ENVIRONMENT_HOST }}
+    -Denvironment.apa.host=${{ vars.ENVIRONMENT_APA_HOST }}
+    -Denvironment.application.name=${{ vars.ENVIRONMENT_APP }}
+
 jobs:
+  pre-checks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+      - name: Check dependabot build
+        uses: Activiti/Activiti/.github/actions/check-ext-build@7700f0283a9ff5181581a350d2520e55c61c1c60 # 8.6.0
+      - name: pre-commit
+        uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@209bb4275688720e13dc0703dbd17826bf677c5c # v6.1.0
+        with:
+          skip_checkout: true
+      - name: Ensure SHA pinned actions
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@b8f9a25a51fe633d9215ac7734854dc11cd299cb # v3.0.13
+
   build-and-deploy:
     runs-on: ubuntu-latest
+    needs:
+      - pre-checks
 
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-
-      - name: Set up JDK 21
-        uses: actions/setup-java@2dfa2011c5b2a0f1489bf9e433881c92c1631f88 # v4.3.0
-        with:
-          java-version: '21'
-          distribution: 'temurin'
+      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Update versions in pom.xml
         run: |
@@ -46,16 +64,34 @@ jobs:
           mvn versions:set-property -Dproperty=activiti-cloud.version -DnewVersion=${{ github.event.inputs.activiti-cloud-version }}
           mvn versions:set -DnewVersion=${{ github.event.inputs.tag-name }}
 
-      - name: Build and verify code
-        run: mvn clean verify
-
       - name: Commit Changes
+        env:
+          VERSION: ${{ github.event.inputs.tag-name }}
         uses: Alfresco/alfresco-build-tools/.github/actions/git-commit-changes@9d00215f539f669b41c7fabf7b88ccc8f316926c # v6.0.1
         with:
           username: ${{ secrets.BOT_GITHUB_USERNAME }}
           commit-message: "Release ${VERSION}"
           add-options: "."
 
+      - name: Push changes
+        env:
+          GITHUB_TOKEN: ${{ inputs.token }}
+        shell: bash
+        run: git push origin
+
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-build-and-tag@209bb4275688720e13dc0703dbd17826bf677c5c # v6.1.0
+        id: build-and-tag
+        with:
+          extra-maven-opts: -T 1C -DunitTests.parallel=true
+          maven-username: ${{ secrets.NEXUS_USERNAME }}
+          maven-password: ${{ secrets.NEXUS_PASSWORD }}
+          quay-username: ${{ secrets.QUAY_USERNAME }}
+          quay-password: ${{ secrets.QUAY_PASSWORD }}
+          docker-username: ${{ secrets.DOCKER_USERNAME }}
+          docker-password: ${{ secrets.DOCKER_PASSWORD }}
+          git-username: ${{ secrets.BOT_GITHUB_USERNAME }}
+          java-version: '21'
+
       - name: Create GitHub tag
         run: |
           git tag ${{ github.event.inputs.tag-name }}
@@ -66,4 +102,4 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
           VERSION: ${{ github.event.inputs.tag-name }}
         run: |
-          gh release create ${VERSION} --title ${VERSION} --notes "Release ${VERSION}" --target ${VERSION}
+          gh release create ${VERSION} --title ${VERSION} --notes "Release ${VERSION}" --target ${{ github.sha }}