release-maven.yml

name: Release Maven Central
on:
  push:
    branches: [main]
    tags: ["*"]

jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: DeterminateSystems/nix-installer-action@v22
        with:
          summarize: false
      - uses: DeterminateSystems/magic-nix-cache-action@v13
      - name: Publish ${{ github.ref }}
        run: nix develop --command sbt ci-release
        env:
          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
          PGP_SECRET: ${{ secrets.PGP_SECRET }}
          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}

  release-cli:
    if: ${{ startsWith(github.ref, 'refs/tags/') }}
    needs: publish
    permissions:
      contents: write
    uses: ./.github/workflows/release-cli.yml
    with:
      tag: ${{ github.ref_name }}