Use Github release automation (#2500)

Co-authored-by: M.P. Korstanje <[email protected]>

Author: mattwynne

.github/workflows/release-github.yml

@@ -0,0 +1,9 @@
+name: Release on GitHub
+
+on:
+  push:
+    branches: [release/*]
+
+jobs:
+  pre-release-check:
+    uses: cucumber/.github/.github/workflows/prerelease-checks.yml@main

.github/workflows/release-java.yml

@@ -0,0 +1,34 @@
+name: Release maven package
+
+on:
+  push:
+    branches: [release/*]
+
+jobs:
+  pre-release-check:
+    uses: cucumber/.github/.github/workflows/prerelease-checks.yml@main
+
+  test-java:
+    uses: ./.github/workflows/test-java.yml
+
+  publish-mvn:
+    name: Publish Maven Package
+    needs: [pre-release-check, test-java]
+    runs-on: ubuntu-latest
+    environment: Release
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - uses: actions/setup-java@v2
+        with:
+          distribution: "temurin"
+          java-version: "11"
+          cache: "maven"
+
+      - uses: cucumber/[email protected]
+        with:
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          nexus-username: cukebot
+          nexus-password: ${{ secrets.SONATYPE_PASSWORD }}

.github/workflows/build.yml renamed to .github/workflows/test-java.yml

@@ -1,9 +1,10 @@
-name: Cucumber CI
+name: Test java
 
 on:
   pull_request:
     branches:
       - '**'
+  workflow_call:
   push:
     branches:
       - main

RELEASING.md

@@ -43,28 +43,26 @@ Check if branch name and version are as expected. To change version run:
 mvn versions:set -DnewVersion=X.Y.Z-SNAPSHOT
 ```
 
-## Secrets ##
-
-Secrets are required to make releases. Members of the core team can install
-keybase and join the `cucumberbdd` team to access these secrets.
-
-During the release process, secrets are fetched from keybase and used to sign
-and upload the maven artifacts.
-
 ## Make the release ##
 
-Check if branch name and version are as expected:
+Only people with permission to push to `release/*` branches can make releases.
+
+1. Check if branch name and version are as expected:
 
 ```
 make version
 ```
 
-Do the release:
+2. Do the release:
 
 ```
 make release
 ``` 
 
+3. Wait until the `release-*` workflows have passed for the new release branch:
+  * [![Release maven package](https://github.com/cucumber/cucumber-jvm/actions/workflows/release-java.yml/badge.svg)](https://github.com/cucumber/cucumber-jvm/actions/workflows/release-java.yml)
+  * [![Release on GitHub](https://github.com/cucumber/cucumber-jvm/actions/workflows/release-github.yml/badge.svg)](https://github.com/cucumber/cucumber-jvm/actions/workflows/release-github.yml)
+
 ## Last bits ##
 
 Update the cucumber-jvm version in the documentation project:
@@ -74,3 +72,5 @@ Update the cucumber-jvm version in the documentation project:
 The cucumber-jvm version for the docs is specified in the docs [versions.yaml](https://github.com/cucumber/docs.cucumber.io/blob/master/data/versions.yaml)
 
 All done! Hurray!
+
+[changelog]: https://github.com/cucumber/changelog#installation