feat: Add Maven Central release workflow (#24)

* Add release workflow to publish to Maven Central

Automates the release process: extracts version from build.gradle,
builds and signs the artifact, publishes to Maven Central, and
creates a GitHub release with the shadow jar.

* Bump version to 0.3.0

* Update README with version 0.3.0 and JDK 17 requirement

* Address PR review feedback on release workflow

- Bump actions/cache from v3 to v4 (Node 16 deprecation)
- Add concurrency group to prevent parallel release attempts
- Document base64 encoding requirement for GPG_PRIVATE_KEY secret

Author: jiayuasu

.github/workflows/release.yml

@@ -0,0 +1,93 @@
+name: Publish Release to Maven Central
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'lib/build.gradle'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Extract version from build.gradle
+        id: version
+        run: |
+          VERSION=$(grep "^version = " lib/build.gradle | sed "s/version = '\(.*\)'/\1/")
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "Detected version: $VERSION"
+
+      - name: Check if tag already exists
+        id: tag_check
+        run: |
+          if git rev-parse "v${{ steps.version.outputs.version }}" >/dev/null 2>&1; then
+            echo "Tag v${{ steps.version.outputs.version }} already exists, skipping release."
+            echo "exists=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "Tag v${{ steps.version.outputs.version }} does not exist, proceeding with release."
+            echo "exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Set up JDK 17
+        if: steps.tag_check.outputs.exists == 'false'
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'adopt'
+          java-version: '17'
+
+      - name: Cache Gradle packages
+        if: steps.tag_check.outputs.exists == 'false'
+        uses: actions/cache@v4
+        with:
+          path: ~/.gradle/caches
+          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+          restore-keys: |
+            ${{ runner.os }}-gradle-
+
+      - name: Import GPG key
+        if: steps.tag_check.outputs.exists == 'false'
+        run: |
+          # GPG_PRIVATE_KEY must be stored as base64-encoded:
+          #   gpg --export-secret-keys --armor <KEY_ID> | base64 | pbcopy
+          echo "${{ secrets.GPG_PRIVATE_KEY }}" | base64 --decode | gpg --batch --import
+          echo "allow-preset-passphrase" >> ~/.gnupg/gpg-agent.conf
+          gpgconf --kill gpg-agent
+          gpgconf --launch gpg-agent
+          GPG_KEYGRIP=$(gpg --with-keygrip --list-secret-keys | grep -A1 '^\[S\]' | grep Keygrip | awk '{print $3}')
+          if [ -z "$GPG_KEYGRIP" ]; then
+            GPG_KEYGRIP=$(gpg --with-keygrip --list-secret-keys | grep Keygrip | head -1 | awk '{print $3}')
+          fi
+          /usr/lib/gnupg/gpg-preset-passphrase --preset "$GPG_KEYGRIP" <<< "${{ secrets.GPG_PASSPHRASE }}"
+
+      - name: Build and publish to Maven Central
+        if: steps.tag_check.outputs.exists == 'false'
+        run: chmod +x ./gradlew && ./gradlew clean build shadowJar publishToCentralPortal
+        env:
+          GRADLE_OPTS: -Dorg.gradle.daemon=false
+          OSSRH_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          OSSRH_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+
+      - name: Create GitHub Release
+        if: steps.tag_check.outputs.exists == 'false'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="v${{ steps.version.outputs.version }}"
+          gh release create "$VERSION" \
+            --title "$VERSION" \
+            --generate-notes \
+            lib/build/libs/*-all.jar

README.md

@@ -6,7 +6,8 @@
 
 A JDBC driver for [Wherobots Spatial SQL](https://www.wherobots.com), enabling
 Java, Scala, and Kotlin applications to interact with WherobotsDB and leverage
-its powerful geospatial analytics capabilities.
+its powerful geospatial analytics capabilities. The driver is compiled against
+JDK 17 and requires Java 17 or later.
 
 This driver is also compatible with database tools like [JetBrains
 DataGrip](https://www.jetbrains.com/datagrip/) and
@@ -18,7 +19,7 @@ DataGrip](https://www.jetbrains.com/datagrip/) and
 
 ```gradle
 dependencies {
-    implementation 'com.wherobots.jdbc:wherobots-jdbc-driver:0.2.2'
+    implementation 'com.wherobots.jdbc:wherobots-jdbc-driver:0.3.0'
 }
 ```
 
@@ -28,7 +29,7 @@ dependencies {
 <dependency>
     <groupId>com.wherobots.jdbc</groupId>
     <artifactId>wherobots-jdbc-driver</artifactId>
-    <version>0.2.2</version>
+    <version>0.3.0</version>
 </dependency>
 ```
 

lib/build.gradle

@@ -15,7 +15,7 @@ plugins {
 
 description = 'JDBC driver for the Wherobots Cloud Spatial SQL API'
 group = 'com.wherobots.jdbc'
-version = '0.2.2'
+version = '0.3.0'
 
 repositories {
     mavenCentral()