publish.yml

name: Publish
on:
  push:
    branches:
    - master
  pull_request:

jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: coursier/cache-action@v6.4
      - uses: coursier/setup-action@v1.3
        with:
          jvm: 11
      - name: Publish local
        run: cd publish && ./mill -i __.publishLocal
        if: github.ref != 'refs/heads/master'
        env:
          PUBLISH_SECRET_KEY: ${{ secrets.PUBLISH_SECRET_KEY }}
          PUBLISH_SECRET_KEY_PASSWORD: ${{ secrets.PUBLISH_SECRET_KEY_PASSWORD }}
          PUBLISH_PASSWORD: ${{ secrets.PUBLISH_PASSWORD }}
          PUBLISH_USER: ${{ secrets.PUBLISH_USER }}
      - run: echo "$PGP_SECRET" | base64 --decode | gpg --batch --import
        if: github.ref == 'refs/heads/master'
        env:
          PGP_SECRET: ${{ secrets.PUBLISH_SECRET_KEY }}
      - name: Publish
        run: cd publish && ./mill -i ci.publishSonatype --tasks __.publishArtifacts
        if: github.ref == 'refs/heads/master'
        env:
          PUBLISH_SECRET_KEY: ${{ secrets.PUBLISH_SECRET_KEY }}
          PUBLISH_SECRET_KEY_PASSWORD: ${{ secrets.PUBLISH_SECRET_KEY_PASSWORD }}
          PUBLISH_PASSWORD: ${{ secrets.PUBLISH_PASSWORD }}
          PUBLISH_USER: ${{ secrets.PUBLISH_USER }}