publish-java.yml

name: Publish Java SDK

on:
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to publish (e.g., 1.0.0)'
        required: true
        type: string

jobs:
  publish:
    name: Publish to Maven Central
    # Only publish on a java-sdk-v* release (or a manual dispatch). Without this
    # guard the job runs on EVERY release event, so cutting js/py/go/php/ruby
    # releases together fires concurrent Maven deployments of the same
    # com.turbodocx:turbodocx-sdk coordinate, which collide ("currently being
    # published in another deployment"). The other publish workflows already
    # filter this way.
    if: github.event_name == 'workflow_dispatch' || startsWith(github.event.release.tag_name, 'java-sdk-v')
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: packages/java-sdk

    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK 11
        uses: actions/setup-java@v4
        with:
          java-version: '11'
          distribution: 'temurin'
          cache: 'maven'
          server-id: central
          server-username: MAVEN_USERNAME
          server-password: MAVEN_PASSWORD
          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
          gpg-passphrase: MAVEN_GPG_PASSPHRASE

      - name: Update version (workflow_dispatch)
        if: github.event_name == 'workflow_dispatch'
        run: |
          mvn versions:set -DnewVersion=${{ inputs.version }}
          mvn versions:commit

      - name: Build and Test
        run: mvn clean verify -B -Dgpg.passphrase=${{ secrets.MAVEN_GPG_PASSPHRASE }}
        env:
          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}

      - name: Publish to Maven Central
        run: mvn deploy -B -DskipTests -Dgpg.passphrase=${{ secrets.MAVEN_GPG_PASSPHRASE }}
        env:
          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}