Update release (helidon-io#9210)

Author: romain-grecourt

.github/actions/common/action.yml

@@ -33,18 +33,6 @@ inputs:
     description:  Build cache id
     required: false
     default: 'default'
-  GPG_PASSPHRASE:
-    description: Value of the GPG_PASSPHRASE environment variable
-    required: false
-    default: ''
-  GPG_PRIVATE_KEY:
-    description: Value of the GPG_PRIVATE_KEY environment variable
-    required: false
-    default: ''
-  MAVEN_SETTINGS:
-    description: Value of the MAVEN_SETTINGS environment variable
-    required: false
-    default: ''
   run:
     description: The bash command to run
     required: true
@@ -147,13 +135,9 @@ runs:
           build-cache-${{ github.run_id }}-
     - name: Exec
       env:
-        GPG_PASSPHRASE: ${{ inputs.GPG_PASSPHRASE }}
-        GPG_PRIVATE_KEY: ${{ inputs.GPG_PRIVATE_KEY }}
-        MAVEN_SETTINGS: ${{ inputs.MAVEN_SETTINGS }}
         MAVEN_ARGS: |
           ${{ env.MAVEN_ARGS }}
           -Dmaven.repo.local=${{ github.workspace }}/.m2/repository
-          -Dcache.record=${{ inputs.build-cache == 'read-write' }}
       run: ${{ inputs.run }}
       shell: bash
     - name: Archive test results
@@ -164,8 +148,8 @@ runs:
         if-no-files-found: 'ignore'
         name: ${{ inputs.test-artifact-name }}
         path: |
-          **/target/surefire-reports/*.txt
-          **/target/failsafe-reports/*.txt
+          **/target/surefire-reports/**
+          **/target/failsafe-reports/**
           **/target/it/**/*.log
     - name: Archive artifacts
       if: ${{ inputs.artifact-name != '' && inputs.artifact-path != ''  && always() }}

.github/workflows/assign-issue-to-project.yml

@@ -0,0 +1,30 @@
+#
+# Copyright (c) 2021, 2024 Oracle and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Assign Issue to Project
+
+#on:
+#  issues:
+#    types: [opened, reopened]
+#env:
+#  GITHUB_API_KEY: ${{ secrets.GITHUB_TOKEN }}
+
+jobs:
+  Assign-Issue-To-Backlog:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - run: etc/scripts/assign-issue.sh $GITHUB_REPOSITORY ${{ github.event.issue.number }} Backlog Triage

.github/workflows/assign-issue.yml

@@ -0,0 +1,56 @@
+#
+# Copyright (c) 2022, 2024 Oracle and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Create Backport Issues
+
+on:
+  workflow_dispatch:
+    inputs:
+      issue:
+        description: 'Issue number'
+        required: true
+      version:
+        description: 'Helidon version this issue was reported for'
+        required: true
+        type: choice
+        options:
+          - 2.x
+          - 3.x
+          - 4.x
+        default: '2.x'
+      target-2:
+        type: boolean
+        description: 'Port to 2.x?'
+        default:  false
+      target-3:
+        type: boolean
+        description: 'Port to 3.x?'
+        default: true
+      target-4:
+        type: boolean
+        description: 'Port to 4.x?'
+        default: true
+
+env:
+  GITHUB_API_KEY: ${{ secrets.GITHUB_TOKEN }}
+
+
+jobs:
+  Issue-Backport:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - run: etc/scripts/backport-issues.sh $GITHUB_REPOSITORY ${{ github.event.inputs.issue }} ${{ github.event.inputs.version }} ${{ github.event.inputs.target-2 }} ${{ github.event.inputs.target-3 }} ${{ github.event.inputs.target-4 }}

.github/workflows/backport-issues.yml

@@ -1,66 +1,117 @@
-# Notes
-# - cannot run on Windows, as we use shell scripts
+#
+# Copyright (c) 2023, 2024 Oracle and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
 
 name: "Release"
 
 on:
   push:
-    branches:
-      - 'release-*'
+    branches: [ 'release-*' ]
+
 env:
   JAVA_VERSION: '21'
   JAVA_DISTRO: 'oracle'
-  MAVEN_HTTP_ARGS: '-Dmaven.wagon.httpconnectionManager.ttlSeconds=60 -Dmaven.wagon.http.retryHandler.count=3'
+  MAVEN_ARGS: |
+    -B -e
+    -Dmaven.wagon.httpconnectionManager.ttlSeconds=60
+    -Dmaven.wagon.http.retryHandler.count=3
+    -Djdk.toolchain.version=${JAVA_VERSION}
+    -Dcache.enabled=true
 
 concurrency:
   group: release-${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
-  copyright:
-    timeout-minutes: 10
+  create-tag:
     runs-on: ubuntu-20.04
+    environment: release
+    outputs:
+      version: ${{ steps.create-tag.outputs.version }}
+      tag: ${{ steps.create-tag.outputs.tag }}
     steps:
       - uses: actions/checkout@v4
         with:
-          fetch-depth: 0
-      - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@v4.1.0
-        with:
-          distribution: ${{ env.JAVA_DISTRO }}
-          java-version: ${{ env.JAVA_VERSION }}
-          cache: maven
-      - name: Copyright
-        run: etc/scripts/copyright.sh
-  release:
-    timeout-minutes: 60
+          fetch-depth: '0'
+          token: ${{ secrets.SERVICE_ACCOUNT_TOKEN }}
+      - id: create-tag
+        run: ./etc/scripts/release.sh create_tag >> "${GITHUB_OUTPUT}"
+  validate:
+    needs: create-tag
+    uses: ./.github/workflows/validate.yml
+    with:
+      ref: ${{ needs.create-tag.outputs.tag }}
+  stage:
+    needs: [ create-tag, validate ]
+    strategy:
+      matrix:
+        moduleSet: [ core, integrations, others ]
     runs-on: ubuntu-20.04
+    timeout-minutes: 30
     environment: release
     steps:
       - uses: actions/checkout@v4
         with:
-          token: ${{ secrets.SERVICE_ACCOUNT_TOKEN }}
           fetch-depth: '0'
-      - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@v4.1.0
+          ref: ${{ needs.create-tag.outputs.tag }}
+      - uses: actions/download-artifact@v4
         with:
-          distribution: ${{ env.JAVA_DISTRO }}
-          java-version: ${{ env.JAVA_VERSION }}
-          cache: maven
-      - name: Release
+          pattern: "{javadoc-jars-${{ matrix.moduleSet }},docs}"
+          merge-multiple: true
+      - shell: bash
         env:
           GPG_PASSPHRASE: ${{ secrets.HELIDON_GPG_PASSPHRASE }}
           GPG_PRIVATE_KEY: ${{ secrets.HELIDON_GPG_PRIVATE_KEY }}
-          GPG_PUBLIC_KEY: ${{ secrets.HELIDON_GPG_PUBLIC_KEY }}
-          MAVEN_SETTINGS: ${{ secrets.MAVEN_SETTINGS }}
-          RELEASE_WORKFLOW: "true"
+        run: etc/scripts/setup-gpg.sh
+      - uses: ./.github/actions/common
+        with:
+          build-cache: read-only
+          artifact-name: io-helidon-artifacts-part-${{ matrix.moduleSet }}
+          artifact-path: staging
+          run: |
+            mvn ${MAVEN_ARGS} \
+              -DreactorRule=default \
+              -DmoduleSet=${{ matrix.moduleSet }} \
+              -Dcache.loadSuffixes=javadoc,docs \
+              -Prelease,no-snapshots \
+              -DskipTests \
+              -DaltDeploymentRepository=":::file://${PWD}/staging" \
+              deploy
+  deploy:
+    needs: [ create-tag, stage ]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    environment: release
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: '0'
+          ref: ${{ needs.create-tag.outputs.tag }}
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: io-helidon-artifacts-part-*
+          path: staging
+          merge-multiple: true
+      - shell: bash
+        env:
+          NEXUS_USER: ${{ secrets.NEXUS_USER }}
+          NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
         run: |
-          git config user.email "helidon-robot_ww@oracle.com"
-          git config user.name "Helidon Robot"
-          etc/scripts/release.sh release_build
-      - name: Upload Staged Artifacts
-        uses: actions/upload-artifact@v4
+          etc/scripts/nexus.sh deploy_release \
+            --dir="staging" \
+            --description="Helidon v%{version}"
+      - uses: actions/upload-artifact@v4
         with:
-          name: io-helidon-artifacts-${{ github.ref_name }}
-          path: parent/target/nexus-staging/
-          retention-days: 90
+          name: io-helidon-artifacts-${{ needs.create-tag.outputs.version }}
+          path: staging