release-publish.yml

#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
#

name: Release - Publish After Vote

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Release version (e.g., 1.18.0)'
        required: true
        type: string
      rc_number:
        description: 'RC number that passed the vote (leave empty to auto-detect latest)'
        required: false
        type: string
        default: ''
      staging_repo_id:
        description: 'Nexus staging repository ID (e.g., orgapacheparquet-1234)'
        required: true
        type: string
      allow_description_mismatch:
        description: 'Bypass the staging-repo description check (recovery only)'
        required: false
        type: boolean
        default: false
      dry_run:
        description: 'Dry run mode (no actual changes)'
        required: false
        type: boolean
        default: true

concurrency:
  group: release-${{ inputs.version }}
  cancel-in-progress: false

jobs:
  publish-release:
    if: github.repository_owner == 'apache'
    name: Publish Release
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up JDK 11
        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
        with:
          distribution: temurin
          java-version: '11'

      - name: Install Subversion
        run: sudo apt-get update -q && sudo apt-get install -q -y subversion

      - name: Configure Git
        run: |
          git config --global user.name "github-actions[bot]"
          git config --global user.email "github-actions[bot]@users.noreply.github.com"

      - name: Publish Release
        env:
          DRY_RUN: ${{ inputs.dry_run && '1' || '0' }}
          NEXUS_USERNAME: ${{ secrets.PARQUET_NEXUS_USER }}
          NEXUS_PASSWORD: ${{ secrets.PARQUET_NEXUS_PASSWORD }}
          SVN_USERNAME: ${{ secrets.PARQUET_SVN_DEV_USERNAME }}
          SVN_PASSWORD: ${{ secrets.PARQUET_SVN_DEV_PASSWORD }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          INPUT_VERSION: ${{ inputs.version }}
          INPUT_RC_NUMBER: ${{ inputs.rc_number }}
          INPUT_STAGING_REPO_ID: ${{ inputs.staging_repo_id }}
          INPUT_ALLOW_DESCRIPTION_MISMATCH: ${{ inputs.allow_description_mismatch && '1' || '0' }}
        run: |
          args=("${INPUT_VERSION}" "${INPUT_STAGING_REPO_ID}")
          if [[ -n "${INPUT_RC_NUMBER}" ]]; then
            args+=(--rc "${INPUT_RC_NUMBER}")
          fi
          if [[ "${INPUT_ALLOW_DESCRIPTION_MISMATCH}" == "1" ]]; then
            args+=(--allow-description-mismatch)
          fi
          ./release/bin/publish-release.sh "${args[@]}"