deploy.yml

name: Publish package to GitHub Packages
on:
  push:
  release:
    types: [created]
permissions:
  contents: read
jobs:
  publish:
    runs-on: ubuntu-24.04
    permissions:
      contents: read
      packages: write
    steps:
      - name: Install Harden-Runner
        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
        with:
          disable-sudo: true
          egress-policy: audit
      # XXX: Explain why we have this separately.
      - name: Set up JDKs
        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
        with:
          java-version: |
            25-ea
            17
          distribution: temurin
      - name: Check out code and set up JDK and Maven
        uses: s4u/setup-maven-action@9a27433d289dd99d73851f653607c39d3444e8ba # v1.17.0
        with:
          java-version: 17
          java-distribution: temurin
          maven-version: 3.9.9
      - name: Debug
        run: cat ~/.m2/toolchains.xml
      - name: Publish package
        run: mvn -B deploy -DaltDeploymentRepository=github::https://maven.pkg.github.com/PicnicSupermarket/error-prone
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Remove installed project artifacts
        run: mvn dependency:purge-local-repository -DmanualInclude='${project.groupId}' -DresolutionFuzziness=groupId