ci: setup to deploy to Github packages

Author: jnicoulaud-ledger

.github/workflows/ci.yml

@@ -9,13 +9,13 @@ name: Continuous Integration
 
 on:
   pull_request:
-    branches: ['**', '!update/**', '!pr/**']
+    branches: [ '**', '!update/**', '!pr/**' ]
   push:
-    branches: ['**', '!update/**', '!pr/**']
-    tags: [v*]
+    branches: [ '**', '!update/**', '!pr/**' ]
+    tags: [ v* ]
 
 env:
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
 
 
 concurrency:
@@ -27,9 +27,9 @@ jobs:
     name: Test
     strategy:
       matrix:
-        os: [ubuntu-latest]
-        scala: [3]
-        java: [graalvm@21]
+        os: [ ubuntu-latest ]
+        scala: [ 3 ]
+        java: [ graalvm@21 ]
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
@@ -89,12 +89,12 @@ jobs:
 
   publish:
     name: Publish Artifacts
-    needs: [prepare-release]
+    needs: [ prepare-release ]
     if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v'))
     strategy:
       matrix:
-        os: [ubuntu-latest]
-        java: [graalvm@21]
+        os: [ ubuntu-latest ]
+        java: [ graalvm@21 ]
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (full)
@@ -128,37 +128,23 @@ jobs:
           tar xf targets.tar
           rm targets.tar
 
-      - name: Import signing key
-        if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE == ''
-        env:
-          PGP_SECRET: ${{ secrets.PGP_SECRET }}
-          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
-        run: echo $PGP_SECRET | base64 -d -i - | gpg --import
-
-      - name: Import signing key and strip passphrase
-        if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE != ''
-        env:
-          PGP_SECRET: ${{ secrets.PGP_SECRET }}
-          PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
-        run: |
-          echo "$PGP_SECRET" | base64 -d -i - > /tmp/signing-key.gpg
-          echo "$PGP_PASSPHRASE" | gpg --pinentry-mode loopback --passphrase-fd 0 --import /tmp/signing-key.gpg
-          (echo "$PGP_PASSPHRASE"; echo; echo) | gpg --command-fd 0 --pinentry-mode loopback --change-passphrase $(gpg --list-secret-keys --with-colons 2> /dev/null | grep '^sec:' | cut --delimiter ':' --fields 5 | tail -n 1)
+      - name: Login to Github registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ secrets.CI_BOT_USERNAME }}
+          password: ${{ secrets.CI_BOT_TOKEN }}
 
       - name: Publish
-        env:
-          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
-          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
-          SONATYPE_CREDENTIAL_HOST: ${{ secrets.SONATYPE_CREDENTIAL_HOST }}
-        run: sbt tlCiRelease
+        run: sbt publish
 
   dependency-submission:
     name: Submit Dependencies
     if: github.event.repository.fork == false && github.event_name != 'pull_request'
     strategy:
       matrix:
-        os: [ubuntu-22.04]
-        java: [graalvm@21]
+        os: [ ubuntu-22.04 ]
+        java: [ graalvm@21 ]
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (full)
@@ -192,8 +178,8 @@ jobs:
     name: Validate Steward Config
     strategy:
       matrix:
-        os: [ubuntu-22.04]
-        java: [temurin@11]
+        os: [ ubuntu-22.04 ]
+        java: [ temurin@11 ]
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout current branch (fast)
@@ -215,13 +201,13 @@ jobs:
 
   prepare-release:
     name: 👷 Prepare release
-    needs: [build]
+    needs: [ build ]
     if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || startsWith(github.ref, 'refs/heads/main'))
     strategy:
       matrix:
-        os: [ubuntu-latest]
-        scala: [2.13]
-        java: [temurin@11]
+        os: [ ubuntu-latest ]
+        scala: [ 2.13 ]
+        java: [ temurin@11 ]
     runs-on: ${{ matrix.os }}
     permissions:
       actions: write
@@ -294,86 +280,3 @@ jobs:
           makeLatest: true
           allowUpdates: true
           token: ${{ github.token }}
-
-  website:
-    name: 🌐 Publish website
-    needs: [publish]
-    strategy:
-      matrix:
-        os: [ubuntu-latest]
-        scala: [2.13]
-        java: [temurin@11]
-    runs-on: ${{ matrix.os }}
-    permissions:
-      actions: write
-      checks: write
-      contents: write
-      deployments: write
-      id-token: none
-      issues: write
-      packages: write
-      pages: write
-      pull-requests: write
-      repository-projects: write
-      security-events: write
-      statuses: write
-    env:
-      DTC_HEADLESS: true
-    steps:
-      - name: Checkout current branch (fast)
-        uses: actions/checkout@v4
-
-      - name: Setup
-        run: chmod +x dtcw
-
-      - name: Setup Java (temurin@17)
-        id: setup-java-temurin-17
-        if: matrix.java == 'temurin@17'
-        uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-          cache: sbt
-
-      - name: sbt update
-        if: matrix.java == 'temurin@17' && steps.setup-java-temurin-17.outputs.cache-hit == 'false'
-        run: sbt +update
-
-      - name: Setup sbt
-        uses: sbt/setup-sbt@v1
-
-      - name: Install docToolchain
-        run: ./dtcw local install doctoolchain
-
-      - name: Cache sbt
-        uses: actions/cache@v4
-        with:
-          path: |
-            .ivy2
-            .sbt
-          key: sbt-${{ hashFiles('build.sbt', 'plugins.sbt') }}
-          restore-keys: pillars-cache-${{ hashFiles('build.sbt', 'plugins.sbt') }}
-
-      - name: Get latest version
-        id: version
-        run: |
-          PILLARS_VERSION="$(git ls-remote --tags $REPO | awk -F"/" '{print $3}' | grep '^v[0-9]*\.[0-9]*\.[0-9]*' | grep -v '\{\}' | sort --version-sort | tail -n1)"
-          echo "latest version is [$PILLARS_VERSION]"
-          echo "version=${PILLARS_VERSION#v}" >> "$GITHUB_OUTPUT"
-
-      - name: Generate site
-        env:
-          PILLARS_VERSION: ${{ steps.version.outputs.version }}
-          DTC_HEADLESS: true
-        run: ./dtcw local generateSite && sbt unidoc
-
-      - name: Copy to public
-        run: cp -r target/microsite/output ./public
-
-      - name: Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v4
-        with:
-          github_token: ${{ github.token }}
-          publish_dir: ./public
-          cname: pillars.dev
-          enable_jekyll: false

.github/workflows/clean.yml

@@ -1,28 +1,19 @@
 import sbt.ThisBuild
-import xerial.sbt.Sonatype.GitHubHosting
-import xerial.sbt.Sonatype.sonatypeCentralHost
 
 ThisBuild / tlBaseVersion := "0.5" // your current series x.y
 
-ThisBuild / organization := "io.funktional"
-ThisBuild / homepage     := Some(url("https://pillars.dev"))
-ThisBuild / startYear    := Some(2023)
-ThisBuild / licenses     := Seq("EPL-2.0" -> url("https://www.eclipse.org/legal/epl-2.0/"))
+ThisBuild / resolvers += Resolver.githubPackages("LedgerHQ")
+ThisBuild / githubOwner      := "LedgerHQ"
+ThisBuild / githubRepository := "pillars"
+ThisBuild / organization     := "co.ledger"
+ThisBuild / homepage         := Some(url("https://pillars.dev"))
+ThisBuild / startYear        := Some(2023)
+ThisBuild / licenses         := Seq("EPL-2.0" -> url("https://www.eclipse.org/legal/epl-2.0/"))
 ThisBuild / developers ++= List(
   // your GitHub handle and name
   tlGitHubDev("rlemaitre", "Raphaël Lemaitre")
 )
 
-ThisBuild / sonatypeCredentialHost := sonatypeCentralHost
-ThisBuild / sonatypeProjectHosting := Some(GitHubHosting(
-  "FunktionalIO",
-  "pillars",
-  "[email protected]"
-))
-ThisBuild / scmInfo                := Some(
-  ScmInfo(url("https://github.com/FunktionalIO/pillars"), "scm:git:[email protected]:FunktionalIO/pillars.git")
-)
-
 ThisBuild / scalaVersion := versions.scala // the default Scala
 
 ThisBuild / tlCiHeaderCheck          := true

build.sbt

@@ -7,3 +7,6 @@ addSbtPlugin("com.github.sbt"           % "sbt-unidoc"                % "0.5.0")
 addSbtPlugin("com.eed3si9n"             % "sbt-buildinfo"             % "0.13.1")
 // Giter8 scaffold
 addSbtPlugin("org.foundweekends.giter8" % "sbt-giter8-scaffold"       % "0.17.0")
+
+addSbtPlugin("com.codecommit" % "sbt-github-packages" % "0.5.3")
+addSbtPlugin("com.github.sbt" % "sbt-git"             % "2.1.0")