Update releasepublished.yml

Author: mricken

.github/workflows/releasepublished.yml

@@ -20,7 +20,7 @@ on:
 jobs:
   # This workflow contains a single job called "build"
   build:
-    # TODO: If this runs in an environment, set this value
+    # NOTE: If this runs in an environment, set this value (where "MC-Action" is the environment name)
     # environment: MC-Action
 
     # The type of runner that the job will run on
@@ -56,11 +56,17 @@ jobs:
           echo "RELEASE=$RELEASE" >> $GITHUB_ENV
           echo "REPO=$REPO" >> $GITHUB_ENV
           echo "FILE_NAME_PART=$FILE_NAME_PART" >> $GITHUB_ENV
-      - name: Configure GPG Key
+      - name: Check credentials
+        run: |
+          set -e
+          echo "Checking SonaType SONATYPE_BASIC_AUTH_CREDENTIALS"
+          curl --fail -X GET -H "Content-Type:application/xml" -u "${{ secrets.SONATYPE_BASIC_AUTH_CREDENTIALS }}" https://oss.sonatype.org/service/local/staging/profiles/b39883a429024e > /dev/null
+          echo "Checking GitHub ACCESS_TOKEN"
+          curl -f -H "Authorization: Bearer ${{ secrets.ACCESS_TOKEN }}" -H 'Accept: application/vnd.github.v3.raw' -s https://api.github.com/repos/$REPO > /dev/null
+      - name: Configure GPG key
         env:
           MCKEY: ${{ secrets.MCKEY }}
         run: |
-          set -x
           mkdir -p ~/.gnupg/
           chown -R $(whoami) ~/.gnupg/
           chmod 700 ~/.gnupg
@@ -71,6 +77,10 @@ jobs:
           ls ~/.gnupg
           gpg --import ~/.gnupg/mckey_private.key
           gpg --list-keys
+      - name: Install packages
+        run: |
+          sudo apt-get install -y jq
+        shell: bash
       - name: Download the release asset
         env:
           ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN }}
@@ -122,16 +132,57 @@ jobs:
           fi
           echo "Asset id for release $RELEASE file $FILE_NAME_PART is $asset_id"
           wget -q --header="Authorization: Bearer $ACCESS_TOKEN" --auth-no-challenge --header='Accept:application/octet-stream' https://api.github.com/repos/$REPO/releases/assets/$asset_id -O asset.zip
-      - name: Examine artifact
+      - name: Examine asset
         run: |
           ls
           mkdir unpacked
           cd unpacked
           unzip -q ../asset.zip
+          head CHANGELOG.md 
           find .
       - name: GPG sign all Maven files
         run: |
-          set -x
           cd unpacked/maven
           find . -type f -not -name \*.asc | xargs -n 1 -I % gpg --output %.asc --detach-sig %
           find .
+      - name: Checksum all Maven files
+        run: |
+          cd unpacked/maven
+          find . -type f -not -name \*.asc -not -name \*.md5 -not -name \*.sha1 | xargs -n 1 -I % sh -c "md5sum % | cut -d' ' -f1 > %.md5"
+          find . -type f -not -name \*.asc -not -name \*.md5 -not -name \*.sha1 | xargs -n 1 -I % sh -c "sha1sum % | cut -d' ' -f1 > %.sha1"
+          find .
+      - name: Staging artifacts in SonaType
+        run: |
+          # Code mostly by mezzargh
+          set -x
+          set -e
+          WD=`pwd`
+          START_XML=$(cat << EOF
+          <promoteRequest>
+              <data>
+                  <description>Publish ${GITHUB_REPOSITORY} ${RELEASE} Artifacts</description>
+              </data>
+          </promoteRequest>
+          EOF
+          )
+          printf "$START_XML" > start.xml
+          ls -lahn
+          cat start.xml
+          cd unpacked/maven/repository
+          cp $WD/start.xml start.xml
+          cat start.xml
+          curl --fail -v -X POST -d @start.xml -H "Content-Type:application/xml" -u "${{ secrets.SONATYPE_BASIC_AUTH_CREDENTIALS }}" https://oss.sonatype.org/service/local/staging/profiles/b39883a429024e/start -o $WD/finish.xml
+          rm start.xml
+          ls -lahn $WD
+          cat $WD/finish.xml
+          staging_dir=$(echo $(awk -F '[<>]' '/stagedRepositoryId/{print $3}' $WD/finish.xml))
+          echo "Staging dir is '${staging_dir}'"
+          find . -type f | sed -E s'@./@@' | grep -v start.xml > $WD/artifacts.list
+          ls -lahn $WD
+          echo "Uploading $(wc -l $WD/artifacts.list | sed "s/^ *\([0-9]*\) .*$/\1/") artifacts"
+          awk '{printf "%5d\t%s\n", NR, $0}' < $WD/artifacts.list
+          cat $WD/artifacts.list | xargs -n 1 -I {} curl --fail -u "${{ secrets.SONATYPE_BASIC_AUTH_CREDENTIALS }}" --upload-file {} https://oss.sonatype.org/service/local/staging/deployByRepositoryId/${staging_dir}/{}
+          cp $WD/finish.xml finish.xml
+          cat finish.xml
+          curl --fail -X POST -d @finish.xml -H "Content-Type:application/xml" -u "${{ secrets.SONATYPE_BASIC_AUTH_CREDENTIALS }}" -H "Content-Type:application/xml" https://oss.sonatype.org/service/local/staging/profiles/b39883a429024e/finish
+          echo https://oss.sonatype.org/content/repositories/${staging_dir}