From 4d33920405469b3cce5cca4b98e57dc447641072 Mon Sep 17 00:00:00 2001
From: Ray Ryan <ray@squareup.com>
Date: Tue, 30 Apr 2024 10:25:13 -0700
Subject: [PATCH] New publish-release task

Can only test this from main, so no promises that it works yet. Also note no `checkVersionIsNotSnapshot`, no `artifactsCheck` -- run your own damn tests.
---
 .github/workflows/publish-release.yml | 38 +++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 .github/workflows/publish-release.yml

diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
new file mode 100644
index 0000000..cabf02d
--- /dev/null
+++ b/.github/workflows/publish-release.yml
@@ -0,0 +1,38 @@
+name: Publish Release
+
+on:
+  workflow_dispatch:
+
+jobs:
+  publish-release:
+    runs-on: macos-latest
+    if: github.repository == 'square/radiography'
+    timeout-minutes: 35
+
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+      - uses: gradle/wrapper-validation-action@699bb18358f12c5b78b37bb0111d3a0e2276e0e2 # v2
+#
+#      - name: Ensure this isn't a -SNAPSHOT version
+#        uses: rickbusarow/actions/gradle-task@bf0940965387f10bcb8b6699a79499d18167dfbe # v1
+#        with:
+#          task: checkVersionIsNotSnapshot
+
+      - name: Assemble
+        uses: rickbusarow/actions/gradle-task@bf0940965387f10bcb8b6699a79499d18167dfbe # v1
+        with:
+          task: assemble
+#
+#      - name: Check
+#        uses: rickbusarow/actions/gradle-task@bf0940965387f10bcb8b6699a79499d18167dfbe # v1
+#        with:
+#          task: check -x artifactsCheck
+
+      - name: Publish Release
+        uses: rickbusarow/actions/gradle-task@bf0940965387f10bcb8b6699a79499d18167dfbe # v1
+        with:
+          task: publish
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
+          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.ARTIFACT_SIGNING_PRIVATE_KEY }}