Publish releases to the Code Genome Project alongside Maven Central (#1)

* Publish releases to the Code Genome Project instead of Maven Central

Bump `org.openrewrite.build.recipe-library` from 1.8.1 to `latest.release`,
which is what applies `org.openrewrite.build.publish-cgp`. That plugin needs
Groovy 4, so the Gradle wrapper moves from 8.14 to 9.7.0 to match the rest of
the org.

Disable the Sonatype repository and staging tasks so `publish` targets only
the `cgp` repository, while the shared publish workflow can keep invoking
`closeAndReleaseSonatypeStagingRepository`.

Forward the cgp_* publishing and resolution secrets in both workflows, and
rename ossrh_username/ossrh_token to sonatype_username/sonatype_token, which
is what the shared gh-automation workflows now declare. Also point ci.yml at
`master`, the repository's actual default branch, so CI runs at all.

* Keep publishing to Maven Central alongside the Code Genome Project

* Publish snapshots from master

ci-gradle.yml gates its snapshot step on `refs/heads/main`, so this repository
never published snapshots. Add a job that runs the same publish-snapshots
action on pushes to master, and opt out of the shared step so the two cannot
both fire if that condition is later broadened.

* Revert to the shared snapshot publishing now that the branch is main

The default branch was renamed from master to main, so ci-gradle.yml's own
snapshot step matches again and the repository-local job it needed is gone.

Author: timtebeek

.github/workflows/ci.yml

@@ -23,10 +23,12 @@ jobs:
     uses: openrewrite/gh-automation/.github/workflows/ci-gradle.yml@main
     secrets:
       gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-      gradle_enterprise_cache_username: ${{ secrets.GRADLE_ENTERPRISE_CACHE_USERNAME }}
-      gradle_enterprise_cache_password: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
-      ossrh_username: ${{ secrets.OSSRH_USERNAME }}
-      ossrh_token: ${{ secrets.OSSRH_TOKEN }}
+      sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
+      sonatype_token: ${{ secrets.SONATYPE_TOKEN }}
       ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
       ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
       OPS_GITHUB_ACTIONS_WEBHOOK: ${{ secrets.OPS_GITHUB_ACTIONS_WEBHOOK }}
+      cgp_aws_access_key_id: ${{ secrets.CGP_AWS_ACCESS_KEY_ID }}
+      cgp_aws_secret_access_key: ${{ secrets.CGP_AWS_SECRET_ACCESS_KEY }}
+      cgp_artifacts_maven_username: ${{ secrets.CGP_ARTIFACTS_MAVEN_USERNAME }}
+      cgp_artifacts_maven_token: ${{ secrets.CGP_ARTIFACTS_MAVEN_TOKEN }}

.github/workflows/publish.yml

@@ -16,7 +16,11 @@ jobs:
     uses: openrewrite/gh-automation/.github/workflows/publish-gradle.yml@main
     secrets:
       gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-      ossrh_username: ${{ secrets.OSSRH_USERNAME }}
-      ossrh_token: ${{ secrets.OSSRH_TOKEN }}
+      sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
+      sonatype_token: ${{ secrets.SONATYPE_TOKEN }}
       ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
       ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+      cgp_aws_access_key_id: ${{ secrets.CGP_AWS_ACCESS_KEY_ID }}
+      cgp_aws_secret_access_key: ${{ secrets.CGP_AWS_SECRET_ACCESS_KEY }}
+      cgp_artifacts_maven_username: ${{ secrets.CGP_ARTIFACTS_MAVEN_USERNAME }}
+      cgp_artifacts_maven_token: ${{ secrets.CGP_ARTIFACTS_MAVEN_TOKEN }}

build.gradle.kts

@@ -1,6 +1,6 @@
 plugins {
     groovy
-    id("org.openrewrite.build.recipe-library") version "1.8.1"
+    id("org.openrewrite.build.recipe-library") version "latest.release"
 }
 
 group = "org.openrewrite.tools"

gradle/wrapper/gradle-wrapper.jar

@@ -1,6 +1,9 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.0-bin.zip
 networkTimeout=10000
+retries=0
+retryBackOffMs=500
+validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists