publish.yml

name: Publish to Maven Central

on:
  push:
    tags:
      - 'v*'

jobs:
  publish:
    runs-on: ubuntu-latest
    environment: mvn

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Extract version from tag
        id: version
        run: |
          TAG="${GITHUB_REF_NAME}"
          VERSION="${TAG#v}"
          if [[ ! "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+.*$ ]]; then
            echo "Tag '$TAG' does not look like a semver release (expected vX.Y.Z)" >&2
            exit 1
          fi
          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
          echo "Publishing version: $VERSION"

      - name: Set up JDK 25
        uses: actions/setup-java@v4
        with:
          java-version: '25'
          distribution: 'temurin'
          server-id: central
          server-username: MAVEN_CENTRAL_USERNAME
          server-password: MAVEN_CENTRAL_PASSWORD
          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
          gpg-passphrase: MAVEN_GPG_PASSPHRASE

      - name: Configure GPG for non-interactive signing
        run: |
          mkdir -p ~/.gnupg
          chmod 700 ~/.gnupg
          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
          echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
          echo "use-agent" >> ~/.gnupg/gpg.conf
          gpgconf --reload gpg-agent || true

      # central-publishing-maven-plugin (incl. 0.11.0) bundles maven-metadata-local.xml written by Maven 3.10+,
      # and Central rejects the bundle, so the runner's default Maven must not be used
      - name: Set up Maven 3.9.16
        run: |
          MAVEN_VERSION=3.9.16
          curl -fsSL "https://repo1.maven.org/maven2/org/apache/maven/apache-maven/${MAVEN_VERSION}/apache-maven-${MAVEN_VERSION}-bin.tar.gz" | tar -xz -C "$RUNNER_TEMP"
          echo "$RUNNER_TEMP/apache-maven-${MAVEN_VERSION}/bin" >> "$GITHUB_PATH"

      - name: Check Maven version
        run: mvn -v

      - name: Cache Maven packages
        uses: actions/cache@v4
        with:
          path: ~/.m2/repository
          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
          restore-keys: ${{ runner.os }}-m2

      - name: Verify pom.xml version matches tag
        run: |
          POM_VERSION=$(mvn -B -q -DforceStdout help:evaluate -Dexpression=project.version)
          TAG_VERSION="${{ steps.version.outputs.version }}"
          if [ "$POM_VERSION" != "$TAG_VERSION" ]; then
            echo "::error::Version mismatch — tag is '$TAG_VERSION' but pom.xml has '$POM_VERSION'."
            echo "::error::Bump pom.xml first: mvn versions:set -DnewVersion=$TAG_VERSION -DgenerateBackupPoms=false"
            echo "::error::Then commit, tag, and push again."
            exit 1
          fi
          echo "pom.xml version matches tag: $POM_VERSION"

      - name: Publish to Maven Central
        env:
          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
        run: mvn -B -P sign-artifacts -DskipTests clean deploy

      - name: Debug central staging
        if: failure()
        run: |
          echo "::group::Maven / Java"
          mvn -v
          echo "MAVEN_OPTS=$MAVEN_OPTS"
          echo "MAVEN_ARGS=$MAVEN_ARGS"
          ls -la .mvn 2>/dev/null || echo "no .mvn directory"
          echo "::endgroup::"

          echo "::group::target/central-staging (all files)"
          find target/central-staging -exec ls -ld {} \; 2>/dev/null || echo "no target/central-staging"
          echo "::endgroup::"

          echo "::group::Files outside the version directory"
          ARTIFACT_DIR=target/central-staging/io/github/dataforseo/dataforseo-client
          ls -la "$ARTIFACT_DIR" 2>/dev/null || echo "no $ARTIFACT_DIR"
          find "$ARTIFACT_DIR" -maxdepth 1 -type f 2>/dev/null | while read -r f; do
            echo "----- $f"
            head -c 4000 "$f"
            echo
          done
          echo "::endgroup::"

          echo "::group::central-bundle.zip entries"
          for z in target/central-publishing/central-bundle.zip target/central-staging/central-bundle.zip; do
            echo "----- $z"
            unzip -l "$z" 2>/dev/null || echo "not found"
          done
          echo "::endgroup::"

          echo "::group::target (top level)"
          ls -la target 2>/dev/null || echo "no target"
          echo "::endgroup::"