Set up publish

Author: Baccata

.github/workflows/ci.yml

@@ -1,12 +1,22 @@
 name: CI
 
 on:
-  push:
   pull_request:
+    branches: ["*"]
+  push:
+    branches: ["main"]
+    tags: ["v*"]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
 
     steps:
     - name: Checkout
@@ -31,3 +41,27 @@ jobs:
         mill -k --disable-ticker __.resolvedIvyDeps &&
         mill -j 0 -k --disable-ticker __.checkFormat &&
         mill -j 0 -k --disable-ticker __.test
+
+    - name: Set up GPG
+      if: startsWith(github.ref, 'refs/tags/v')
+      run: |
+        mkdir ~/.gnupg && chmod 700 ~/.gnupg
+        echo use-agent >> ~/.gnupg/gpg.conf
+        echo pinentry-mode loopback >> ~/.gnupg/gpg.conf
+        echo allow-loopback-pinentry >> ~/.gnupg/gpg-agent.conf
+        chmod 600 ~/.gnupg/*
+        echo RELOADAGENT | gpg-connect-agent
+        echo $PGP_SECRET | base64 --decode | gpg --import --no-tty --batch --yes
+      env:
+        PGP_SECRET: ${{ secrets.PGP_SECRET }}
+
+    - name: Publish release
+      if: startsWith(github.ref, 'refs/tags/v')
+      run: |
+        export GPG_TTY=$(tty)
+        mill -j 0 -k --disable-ticker mill.scalalib.PublishModule/publishAll \
+          --publishArtifacts __.publishArtifacts \
+          --sonatypeCreds ${{ secrets.SONATYPE_USERNAME }}:${{secrets.SONATYPE_PASSWORD }} \
+          --gpgArgs '--passphrase=${{ secrets.PGP_PASSPHRASE }},--batch,--yes,-a,-b' \
+          --signed true \
+          --release true

README.md

@@ -1,3 +1,5 @@
+[![CI](https://github.com/neandertech/jsonrpclib/actions/workflows/ci.yml/badge.svg)](https://github.com/neandertech/jsonrpclib/actions/workflows/ci.yml)
+
 # jsonrpclib
 
 This is a cross-platform, cross-scala-version [jsonrpc](https://www.jsonrpc.org/) library that provides construct for bidirectional communication using