Simplify workflows using consolidated workflow

.github/workflows/ci.yml

@@ -14,39 +14,19 @@ on:
   schedule:
     - cron: 0 16 * * *
 
-env:
-  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-
 concurrency:
-  group: ${{ github.ref }}
+  group: ci-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
-      - uses: gradle/wrapper-validation-action@v1
-      - uses: DeLaGuardo/[email protected]
-        with:
-          java: java11
-          graalvm: 21.2.0
-      - name: install-polyglot-languages
-        run: |
-          gu install nodejs python ruby R llvm-toolchain
-      - name: build
-        uses: gradle/gradle-build-action@v2
-        with:
-          arguments: build
-      - name: publish-snapshots
-        if: github.event_name == 'push' || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'
-        uses: gradle/gradle-build-action@v2
-        with:
-          arguments: snapshot publish -PforceSigning -x test
-        env:
-          ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.OSSRH_USERNAME }}
-          ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.OSSRH_TOKEN }}
-          ORG_GRADLE_PROJECT_signingKey: ${{ secrets.OSSRH_SIGNING_KEY }}
-          ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+    uses: openrewrite/gh-automation/.github/workflows/ci-gradle.yml@main
+    secrets:
+      gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
+      ossrh_username: ${{ secrets.OSSRH_USERNAME }}
+      ossrh_token: ${{ secrets.OSSRH_TOKEN }}
+      ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
+      ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+    with:
+      build_on_graal: true
+      install_graal_languages: nodejs python ruby R llvm-toolchain

.github/workflows/moderne-ingest.yml

@@ -8,11 +8,12 @@ on:
   schedule:
     - cron: 0 16 * * *
 
+concurrency:
+  group: ingest-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   ingest:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-      - uses: docker://moderne/ingest:java11-latest
-        env:
-          MODERNE_API_ACCESS_TOKEN: ${{ secrets.MODERNE_API_ACCESS_TOKEN }}
+    uses: openrewrite/gh-automation/.github/workflows/moderne-ingest.yml@main
+    secrets:
+      moderne_api_access_token: ${{ secrets.MODERNE_API_ACCESS_TOKEN }}

.github/workflows/publish.yml

@@ -7,49 +7,16 @@ on:
       - v[0-9]+.[0-9]+.[0-9]+
       - v[0-9]+.[0-9]+.[0-9]+-rc.[0-9]+
 
-env:
-  GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
+concurrency:
+  group: publish-${{ github.ref }}
+  cancel-in-progress: false
 
 jobs:
   release:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-java@v2
-        with:
-          distribution: temurin
-          java-version: 11
-
-      - name: publish-candidate
-        if: contains(github.ref, '-rc.')
-        uses: gradle/gradle-build-action@v2
-        with:
-          arguments: |
-            -Prelease.disableGitChecks=true
-            -Prelease.useLastTag=true
-            candidate
-            publish
-            closeAndReleaseSonatypeStagingRepository
-        env:
-          ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.OSSRH_USERNAME }}
-          ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.OSSRH_TOKEN }}
-          ORG_GRADLE_PROJECT_signingKey: ${{ secrets.OSSRH_SIGNING_KEY }}
-          ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
-
-      - name: publish-release
-        if: (!contains(github.ref, '-rc.'))
-        uses: gradle/gradle-build-action@v2
-        with:
-          arguments: |
-            -Prelease.disableGitChecks=true
-            -Prelease.useLastTag=true
-            final
-            publish
-            closeAndReleaseSonatypeStagingRepository
-        env:
-          ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.OSSRH_USERNAME }}
-          ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.OSSRH_TOKEN }}
-          ORG_GRADLE_PROJECT_signingKey: ${{ secrets.OSSRH_SIGNING_KEY }}
-          ORG_GRADLE_PROJECT_signingPassword: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+    uses: openrewrite/gh-automation/.github/workflows/publish-gradle.yml@main
+    secrets:
+      gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
+      ossrh_username: ${{ secrets.OSSRH_USERNAME }}
+      ossrh_token: ${{ secrets.OSSRH_TOKEN }}
+      ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
+      ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}