Publish artifacts in CI

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Set up JDK 8
-      uses: actions/setup-java@v4.2.2
+      uses: actions/setup-java@v4
       with:
         java-version: '8'
         distribution: 'temurin'
@@ -36,3 +36,35 @@ jobs:
     - name: Run tests sbt 2.x
       if: ${{ matrix.sbt == 2 }}
       run: sbt ++3.3.4 test scripted
+
+  publish:
+    name: Publish artifacts
+    needs: [build]
+    if: github.event_name != 'pull_request' && (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/v'))
+
+    runs-on: ubuntu-latest
+    steps:
+    - name: Set up JDK 8
+      uses: actions/setup-java@v4
+      with:
+        java-version: '8'
+        distribution: 'temurin'
+        cache: sbt
+
+    - name: Set up SBT
+      uses: sbt/setup-sbt@v1
+
+    - name: Publish snapshot
+      if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
+      run: sbt --client +publish
+      env:
+        SONATYPE_USERNAME: ${{ secrets.SONATYPE_USER }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+
+    - name: Publish release
+      if: startsWith(github.ref, 'refs/tags/v')
+      run: sbt --client +publishSigned sonatypeBundleRelease
+      env:
+        SONATYPE_USERNAME: ${{ secrets.SONATYPE_USER }}
+        SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}