ci: implement semantic release process

.github/workflows/flow-trigger-release.yaml

@@ -0,0 +1,191 @@
+##
+# Copyright (C) 2025 Hedera Hashgraph, LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+##
+
+name: "[Main] Create New Release"
+on:
+  workflow_dispatch:
+    inputs:
+      build_number:
+        description: "Build Number (ex: 43 = build_00043)"
+        type: string
+        required: true
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  id-token: write
+  contents: read
+  actions: read
+
+jobs:
+  create-new-release:
+    name: Create New Release
+    runs-on: network-node-linux-medium
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
+      - name: Build Input Validation
+        id: validate
+        run: |
+          echo "The input is ${{ inputs.build_number }}"
+          if ! [[ "${{ inputs.build_number }}" =~ ^[0-9]+$ ]]; then
+            echo "Input is not a valid integer"
+            exit 1
+          fi
+          echo "Input is a valid integer: $(( ${{ inputs.build_number }} ))"
+
+          # 5-digit padding
+          padded_number=$(printf "%05d" ${{ inputs.build_number }})
+          echo "Padded number is: ${padded_number}"
+
+          # Add "build_" prefix to the padded number
+          build_tag="build-${padded_number}"
+          echo "Prefixed number is: ${build_tag}"
+
+          # Export to Github output and Github summary
+          BUILD_TAG=${build_tag}
+          echo "BUILD_TAG=${build_tag}" >> ${GITHUB_OUTPUT}
+          echo "Build Tag to Release: ${BUILD_TAG}" >> ${GITHUB_STEP_SUMMARY}
+
+      - name: Checkout Code
+        id: checkout_code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: "0"
+          ref: ${{ steps.validate.outputs.BUILD_TAG }}
+          token: ${{ secrets.GH_ACCESS_TOKEN }}
+
+      - name: Import GPG Key
+        uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0
+        with:
+          git_commit_gpgsign: true
+          git_tag_gpgsign: true
+          git_user_signingkey: true
+          gpg_private_key: ${{ secrets.SVCS_GPG_KEY_CONTENTS }}
+          passphrase: ${{ secrets.SVCS_GPG_KEY_PASSPHRASE }}
+
+      - name: Setup Node
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version: 20
+
+      - name: Calculate Temporary Semantic Release Branch Name
+        id: branch_name
+        run: |
+          echo "BRANCH_NAME=temp/${{ steps.validate.outputs.BUILD_TAG }}" >> ${GITHUB_OUTPUT}
+          echo "The temp branch name is: ${BRANCH_NAME}"
+
+      - name: Print Temporary Branch Name
+        run: |
+          echo "The temporary branch name is: ${{ steps.branch_name.outputs.BRANCH_NAME }}"
+          echo "Temporary Branch Name: ${{ steps.branch_name.outputs.BRANCH_NAME }}" >> ${GITHUB_STEP_SUMMARY}
+
+      # Need to create a temporary branch so we can use the git-semver tool to create a release.
+      # Semantic versioning only works off branches, not tags.
+      - name: Create a Temporary Semantic Release Branch
+        run: |
+          echo "git checkout -b ${{ steps.branch_name.outputs.BRANCH_NAME }}"
+          git checkout -b ${{ steps.branch_name.outputs.BRANCH_NAME }}
+
+      - name: Echo Current Branch Name
+        run: |
+          current_branch=$(git symbolic-ref --short HEAD)
+          echo "Currently on branch: ${current_branch}"
+
+      - name: Push Temporary Branch to Origin
+        run: |
+          echo "Pushing branch to origin:"
+          git push --set-upstream origin ${{ steps.branch_name.outputs.BRANCH_NAME }}
+
+      - name: Git-Semver Setup Action
+        uses: DJ-BBot/setup-git-semver@7ede9a8b0c0f4cfff14e9b0a8771dbc546f2b76b # v1.0.1
+
+      - name: Identify Current Version Number
+        run: |
+          echo "Find the current version number"
+          current_version=$(git-semver latest)
+          echo "Current version is: ${current_version}"
+
+      # IF HIERO/HEDERA TRANSITIONS TO A MAJOR RELEASE NUMBER (1.0.0+)
+      # stable = false WILL NO LONGER BE VALID
+      - name: Compute Next Version Number
+        id: next_version
+        run: |
+          echo "Compute next version number using git-semver"
+          echo "next_release=$(git-semver next --stable=false)" >> ${GITHUB_OUTPUT}
+          echo "Next release version is: ${next_release}"
+
+      - name: Apply Tag with Calculated Next Version
+        run: |
+          echo "Applying computed version tag"
+          git tag --annotate v${{ steps.next_version.outputs.next_release }} --message "v${{ steps.next_version.outputs.next_release }}"
+          echo "Applied tag v${{ steps.next_version.outputs.next_release }}"
+          current_version=$(git-semver latest)
+          echo "Version Tag Applied: v${{ steps.next_version.outputs.next_release }}" >> ${GITHUB_STEP_SUMMARY}
+          echo "Current version is: ${current_version}" >> ${GITHUB_STEP_SUMMARY}
+
+      - name: Push Release Tag to Remote
+        run: |
+          echo "Pushing release tag to remote"
+          git push origin tag v${{ steps.next_version.outputs.next_release }}
+          echo "Pushed new release tag to remote"
+
+      - name: Create Release Notes with Markdown
+        run: |
+          echo git-semver log --markdown ${{ steps.next_version.outputs.next_release }}
+          git-semver log --markdown ${{ steps.next_version.outputs.next_release }}
+
+      - name: Clean Up git-semver
+        run: |
+          echo "Deleting git-semver directory"
+          rm -rf ./git-semver
+          echo "Successfully removed git-semver directory"
+
+      - name: View Status After Running Semantic Release
+        run: git status
+
+      - name: Ensure Branch Not in Use and Delete Worktree
+        if: always()
+        run: |
+          # Switch to main
+          git checkout main
+
+          # Check if the branch is associated with a worktree and remove the worktree if it exists
+          worktree_path=$(git worktree list | grep ${{ steps.branch_name.outputs.BRANCH_NAME }} || true)
+
+          if [ -n "$worktree_path" ]; then
+            echo "Removing worktree at $worktree_path"
+            git worktree remove "$worktree_path"
+          else
+            echo "No worktree found for branch ${{ steps.branch_name.outputs.BRANCH_NAME }}"
+          fi
+
+      - name: Delete the Temporary Semantic Release Branch
+        if: always()
+        run: |
+          echo "Deleting the temporary semantic release branch"
+          echo "Deleting local branch now:"
+          git branch -d ${{ steps.branch_name.outputs.BRANCH_NAME }}
+          echo "Deleted Temporary Branch from Local Runner" >> ${GITHUB_STEP_SUMMARY}
+
+          echo "Deleting remote branch now:"
+          git push -d origin ${{ steps.branch_name.outputs.BRANCH_NAME }}
+          echo "Deleted Temporary Branch from Remote" >> ${GITHUB_STEP_SUMMARY}

.github/workflows/increment-next-main-release.yaml

@@ -0,0 +1,116 @@
+##
+# Copyright (C) 2025 Hedera Hashgraph, LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+##
+
+name: "[Main] Prepare Next Release Version"
+on:
+  workflow_dispatch:
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  id-token: write
+  contents: write
+  actions: write
+  issues: write
+
+jobs:
+  next-main-release:
+    name: Prepare Next Release Version
+    runs-on: network-node-linux-medium
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
+      - name: Setup Node
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version: 20
+
+      - name: Checkout Code
+        id: checkout_code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: "0"
+          ref: main
+          token: ${{ secrets.GH_ACCESS_TOKEN }}
+
+      - name: Import GPG Key
+        id: gpg_importer
+        uses: step-security/ghaction-import-gpg@6c8fe4d0126a59d57c21f87c9ae5dd3451fa3cca # v6.1.0
+        with:
+          git_commit_gpgsign: true
+          git_tag_gpgsign: true
+          git_user_signingkey: true
+          gpg_private_key: ${{ secrets.SVCS_GPG_KEY_CONTENTS }}
+          passphrase: ${{ secrets.SVCS_GPG_KEY_PASSPHRASE }}
+
+      - name: Install Semantic Version Tools
+        id: install_semver
+        run: |
+          echo "::group::Download SemVer Binary"
+          sudo curl -L -o /usr/local/bin/semver https://raw.githubusercontent.com/fsaintjacques/semver-tool/master/src/semver
+          echo "::endgroup::"
+          echo "::group::Change SemVer Binary Permissions"
+          sudo chmod -v +x /usr/local/bin/semver
+          echo "::endgroup::"
+          echo "::group::Show SemVer Binary Version Info"
+          semver --version
+          echo "::endgroup::"
+
+      - name: Read Current Version
+        id: read_version
+        run: |
+          current_version=$(cat version.txt)
+          echo "Current version: ${current_version}"
+          echo "version=${current_version}" >> ${GITHUB_OUTPUT}
+          printf "Current Version: ${current_version}" >> ${GITHUB_STEP_SUMMARY}
+
+      - name: Increment Minor Version
+        id: increment_version
+        run: |
+          # Strip the -SNAPSHOT suffix
+          base_version=$(semver get release ${{ steps.read_version.outputs.version }})
+
+          # Increment the minor version
+          new_version=$(semver bump minor ${base_version})
+
+          # Add the -SNAPSHOT suffix back
+          new_version="${new_version}-SNAPSHOT"
+
+          echo "New version: ${new_version}"
+          echo "new-version=${new_version}" >> ${GITHUB_OUTPUT}
+          printf "New Version: ${new_version}" >> ${GITHUB_STEP_SUMMARY}
+
+      - name: Update version.txt
+        run: |
+          echo ${{ steps.increment_version.outputs.new_version }} > version.txt
+
+      - name: Publish to Maven Central
+        run: |
+          ./gradlew versionAsSpecified -PnewVersion=${{ steps.increment_version.outputs.new-version }}
+
+      - name: Add & Commit
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
+        with:
+          cwd: "."
+          author_name: ${{ secrets.SVCS_GIT_USER_NAME }}
+          author_email: ${{ secrets.SVCS_GIT_USER_EMAIL }}
+          commit: --signoff
+          message: "chore: Minor Version Roll"