build: use cloud snapshot, add deployment & configure renovate

.github/workflows/build.yml

@@ -12,17 +12,38 @@ jobs:
         if: ${{ github.event_name != 'pull_request' || github.repository != github.event.pull_request.head.repo.full_name }}
         runs-on: "ubuntu-latest"
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
             - uses: gradle/wrapper-validation-action@v1
             - name: Set up JDK
-              uses: actions/setup-java@v3
+              uses: actions/setup-java@v4
               with:
                   distribution: 'temurin'
                   java-version: 17
             - name: Build
               run: ./gradlew build
             - name : Test Summary
-              uses : EnricoMi/publish-unit-test-result-action@v2.2.0
+              uses : EnricoMi/publish-unit-test-result-action@v2.11.0
               with :
                   junit_files : "**/build/test-results/test/TEST-*.xml"
               if : always()
+            - name: Determine Status
+              run: |
+                  if [ "$(./gradlew properties | awk '/^version:/ { print $2; }' | grep '\-SNAPSHOT')" ]; then
+                    echo "STATUS=snapshot" >> $GITHUB_ENV
+                  else
+                    echo "STATUS=release" >> $GITHUB_ENV
+                  fi
+            - name: Publish Snapshot
+              if: "${{ env.STATUS != 'release' && github.event_name == 'push' && github.ref == 'refs/heads/master' }}"
+              run: ./gradlew publish
+              env:
+                  ORG_GRADLE_PROJECT_sonatypeUsername: "${{ secrets.SONATYPE_USERNAME }}"
+                  ORG_GRADLE_PROJECT_sonatypePassword: "${{ secrets.SONATYPE_PASSWORD }}"
+            - name: Publish Release
+              if: "${{ env.STATUS == 'release' && github.event_name == 'release' }}"
+              run: ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository
+              env:
+                  ORG_GRADLE_PROJECT_sonatypeUsername: "${{ secrets.SONATYPE_USERNAME }}"
+                  ORG_GRADLE_PROJECT_sonatypePassword: "${{ secrets.SONATYPE_PASSWORD }}"
+                  ORG_GRADLE_PROJECT_signingKey: "${{ secrets.SIGNING_KEY }}"
+                  ORG_GRADLE_PROJECT_signingPassword: "${{ secrets.SIGNING_PASSWORD }}"

renovate.json

@@ -0,0 +1,26 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+        "config:base"
+    ],
+    "ignoreDeps": [],
+    "labels": [
+        "dependencies"
+    ],
+    "packageRules": [
+        {
+            "matchManagers": ["github-actions", "gradle-wrapper"],
+            "groupName": "gradle and github actions"
+        },
+        {
+            "matchDepTypes": ["plugin"],
+            "groupName": "gradle and github actions"
+        },
+        {
+            "matchPaths": ["gradle/build-logic/*", "buildSrc/*"],
+            "groupName": "gradle and github actions"
+        }
+    ],
+    "semanticCommitType": "build",
+    "commitMessagePrefix": "chore(deps): "
+}

settings.gradle.kts

@@ -14,7 +14,6 @@ plugins {
 dependencyResolutionManagement {
     repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
     repositories {
-        mavenLocal()
         mavenCentral()
         maven("https://oss.sonatype.org/content/repositories/snapshots/") {
             name = "sonatypeOssSnapshots"