BAH-4087 | Add. Workflow for release deploy (#157)

.github/workflows/build_publish.yaml

@@ -17,7 +17,13 @@ jobs:
           server-username: NEXUS_USERNAME
           server-password: NEXUS_PASSWORD
       - name: Build and deploy with Maven
-        run: ./mvnw --no-transfer-progress clean -U deploy
+        run: |
+          PROJECT_VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)
+          if [[ "$PROJECT_VERSION" == *"-SNAPSHOT" ]]; then
+            ./mvnw --no-transfer-progress clean -U deploy
+          else
+            echo "❌ The current push is for release. So skipping build."
+          fi
         env:
           NEXUS_USERNAME: ${{ secrets.NEXUS_USERNAME }}
           NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}

.github/workflows/release_deploy.yml

@@ -0,0 +1,37 @@
+name: Build and Release package
+on:
+  push:
+    tags:
+      - '[0-9]+.[0-9]+.[0-9]+'
+
+jobs:
+  build-release-package:
+    name: Build and Release package
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up JDK 1.8
+        uses: actions/setup-java@v1
+        with:
+          java-version: 1.8
+          server-id: nexus-sonatype
+          server-username: NEXUS_USERNAME
+          server-password: NEXUS_PASSWORD
+          gpg-private-key: ${{ secrets.BAHMNI_INFRA_GPG_KEY }}
+      - name: Compare Git tag with Maven version
+        run: |
+          export GIT_TAG=${GITHUB_REF#refs/tags/}
+          PROJECT_VERSION=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)
+          if [ "$PROJECT_VERSION" != "$GIT_TAG" ]; then
+            echo "❌ The Git tag ($GIT_TAG) does not match the Maven version ($PROJECT_VERSION)."
+            exit 1
+          else
+            echo "✅ The Git tag matches the Maven version."
+          fi
+
+      - name: Build and deploy with Maven
+        run: ./mvnw --no-transfer-progress clean -U deploy -DperformRelease=true
+        env:
+          NEXUS_USERNAME: ${{ secrets.NEXUS_USERNAME }}
+          NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.BAHMNI_INFRA_GPG_PASSPHRASE }}

pom.xml

@@ -382,6 +382,13 @@
 						<groupId>org.apache.maven.plugins</groupId>
 						<artifactId>maven-gpg-plugin</artifactId>
 						<version>1.6</version>
+						<configuration>
+						<!-- Prevent gpg from using pinentry programs -->
+							<gpgArguments>
+								<arg>--pinentry-mode</arg>
+								<arg>loopback</arg>
+							</gpgArguments>
+						</configuration>
 						<executions>
 							<execution>
 								<id>sign-artifacts</id>