feat(java): Publishing to central-sonatype.

Author: Shrey Bana

.github/workflows/ci_check_pr.yaml

@@ -2,6 +2,9 @@ name: CI Checks on PRs
 
 on:
     pull_request:
+        branches: [ main ]
+    push:
+        branches: [ main ]
 
 concurrency:
     group: ${{ github.workflow }}-${{ github.ref }}
@@ -138,3 +141,41 @@ jobs:
                   make test CI=1
               env:
                   APP_ENV: "TEST"
+
+    java-build:
+        name: Java build
+        runs-on: ubuntu-latest
+        defaults:
+            run:
+                working-directory: clients/java
+
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Set up JDK 17
+              uses: actions/setup-java@v4
+              with:
+                  java-version: '17'
+                  distribution: 'temurin'
+
+            - name: Make gradlew executable
+              run: chmod +x gradlew
+
+            - name: Run Gradle assemble
+              run: ./gradlew assemble
+
+            ## This requires more setup. Specifically, we need the server to be up w/
+            ## some dummy data.
+            # - name: Run tests
+            #   run: ./gradlew test
+
+            - name: Upload build artifacts
+              if: failure()
+              uses: actions/upload-artifact@v4
+              with:
+                  name: build-reports
+                  path: |
+                      build/reports/
+                      build/test-results/
+                  retention-days: 7

.github/workflows/java-cicd.yaml

@@ -289,29 +289,25 @@ jobs:
         if: github.ref == 'refs/heads/main'
         runs-on: ubuntu-latest
         env:
-            VERSION: ${{ needs.tag-release.outputs.version }}
-            AWS_REGION: ${{ vars.AWS_REGION }}
-            CODEARTIFACT_DOMAIN: ${{ vars.CODEARTIFACT_DOMAIN }}
-            CODEARTIFACT_REPOSITORY: ${{ vars.CODEARTIFACT_REPOSITORY }}
+          JRELEASER_GPG_SECRET_KEY: ${{ secrets.SONATYPE_MAVEN_SIGNING_KEY }}
+          JRELEASER_GPG_PUBLIC_KEY: ${{ vars.SONATYPE_MAVEN_SIGNING_PUB_KEY }}
+          JRELEASER_GPG_PASSPHRASE: ${{ secrets.SONATYPE_MAVEN_SIGNING_KEY_PASSWORD }}
+          JRELEASER_MAVENCENTRAL_USERNAME: ${{ secrets.SONATYPE_MAVEN_USERNAME }}
+          JRELEASER_MAVENCENTRAL_TOKEN: ${{ secrets.SONATYPE_MAVEN_PASSWORD }}
+          VERSION: ${{ needs.tag-release.outputs.version }}
+        defaults:
+          run:
+              working-directory: clients/java
+
         steps:
-            - name: Checkout repository
+            - name: Checkout code
               uses: actions/checkout@v4
-              with:
-                  fetch-depth: 0
-
-            - name: Configure AWS Credentials
-              uses: aws-actions/configure-aws-credentials@v4.1.0
-              with:
-                  audience: sts.amazonaws.com
-                  aws-region: ${{ env.AWS_REGION }}
-                  role-session-name: superposition-release
-                  role-to-assume: ${{ secrets.AWS_ARTIFACT_ROLE }}
 
-            - name: Install JDK 17
+            - name: Set up JDK 17
               uses: actions/setup-java@v4
               with:
-                  java-version: "17"
-                  distribution: "temurin"
+                  java-version: '17'
+                  distribution: 'temurin'
 
             - name: Download all rust binary artifacts
               uses: actions/download-artifact@v4
@@ -327,7 +323,7 @@ jobs:
 
             - name: Extract and organize native libraries
               run: |
-                  mkdir -p clients/java/bindings/src/main/resources
+                  mkdir -p bindings/src/main/resources
                   mkdir temp_extract
                   # Extract all native libraries
                   for zip_file in rust-binaries/*.zip; do
@@ -364,7 +360,7 @@ jobs:
                           esac
 
                           # Create the platform-specific directory
-                          target_dir="clients/java/bindings/src/main/resources/$platform"
+                          target_dir="bindings/src/main/resources/$platform"
                           mkdir -p "$target_dir"
 
                           # Copy the file
@@ -378,36 +374,16 @@ jobs:
 
                   # List what we have
                   echo "Native libraries in bindings package:"
-                  ls -lar clients/java/bindings/src/main/resources/
+                  ls -lar bindings/src/main/resources/
 
-            - name: Configure CodeArtifact for Gradle
-              run: |
-                  # Get CodeArtifact authorization token
-                  export CODEARTIFACT_AUTH_TOKEN=$(aws codeartifact get-authorization-token \
-                      --domain $CODEARTIFACT_DOMAIN \
-                      --query authorizationToken --output text)
+            - name: Make gradlew executable
+              run: chmod +x gradlew
 
-                  # Get repository endpoint
-                  export CODEARTIFACT_REPOSITORY_ENDPOINT=$(aws codeartifact get-repository-endpoint \
-                      --domain $CODEARTIFACT_DOMAIN \
-                      --repository $CODEARTIFACT_REPOSITORY \
-                      --format maven --query repositoryEndpoint --output text)
+            - name: Publish
+              run: ./gradlew clean publish
 
-                  echo "CODEARTIFACT_AUTH_TOKEN=$CODEARTIFACT_AUTH_TOKEN" >> $GITHUB_ENV
-                  echo "CODEARTIFACT_REPOSITORY_ENDPOINT=$CODEARTIFACT_REPOSITORY_ENDPOINT" >> $GITHUB_ENV
-
-            - name: Build Java packages
-              run: |
-                  cd clients/java
-                  ./gradlew build -x test
-
-            - name: Publish Java packages
-              run: |
-                  cd clients/java
-                  ./gradlew publish
-              env:
-                  CODEARTIFACT_AUTH_TOKEN: ${{ env.CODEARTIFACT_AUTH_TOKEN }}
-                  CODEARTIFACT_REPOSITORY_ENDPOINT: ${{ env.CODEARTIFACT_REPOSITORY_ENDPOINT }}
+            - name: Deploy to Sonatype
+              run: ./gradlew jreleaserDeploy --info --stacktrace
 
     generate-python-packages:
         needs: [tag-release, generate-rust-binary]
@@ -609,7 +585,7 @@ jobs:
                   toolchain: 1.86.0
                   targets: wasm32-unknown-unknown
                   components: rustfmt, clippy, cargo
-                  
+
             - name: install cargo-edit to perform set-version
               uses: baptiste0928/cargo-install@v2.2.0
               with:
@@ -632,7 +608,7 @@ jobs:
                   cargo publish --package superposition_types
                   cargo publish --package superposition_core
                   cargo publish --package superposition_provider
-                  
+
     release:
         needs: [tag-release, generate-rust-binary]
         runs-on: ubuntu-latest

.github/workflows/release.yaml

@@ -1,7 +1,14 @@
 plugins {
-    `java-library-conventions`
     `publishing-conventions`
-    kotlin("jvm") version "1.9.10"
+    `kotlin-conventions`
+    `java-library`
+}
+
+java {
+    withSourcesJar()
+    toolchain {
+        languageVersion.set(JavaLanguageVersion.of(17))
+    }
 }
 
 extra["displayName"] = "Superposition Foreign Function Interface"

clients/java/bindings/build.gradle.kts

@@ -15,6 +15,17 @@ allprojects {
     }
 }
 
+configurations.all {
+    resolutionStrategy {
+        force(
+            "com.fasterxml.jackson.core:jackson-core:2.16.0",
+            "com.fasterxml.jackson:jackson-bom:2.16.0",
+            "com.fasterxml.jackson.core:jackson-databind:2.16.0",
+            "com.fasterxml.jackson.core:jackson-annotations:2.16.0"
+        )
+    }
+}
+
 /*
  * Jreleaser (https://jreleaser.org) config.
  */
@@ -55,7 +66,7 @@ jreleaser {
                     active = Active.ALWAYS
                     url = "https://central.sonatype.com/api/v1/publisher"
                     snapshotSupported = true
-                    stagingRepository(rootProject.layout.buildDirectory.dir("staging-deploy").get().asFile.path)
+                    stagingRepository(rootProject.layout.buildDirectory.dir("m2").get().asFile.path)
                 }
             }
         }

clients/java/build.gradle.kts

@@ -7,3 +7,16 @@ repositories {
     mavenCentral()
     google()
 }
+
+dependencies {
+    implementation("org.jetbrains.kotlin.jvm:org.jetbrains.kotlin.jvm.gradle.plugin:1.9.10")
+    implementation("org.jetbrains.dokka:org.jetbrains.dokka.gradle.plugin:2.0.0")
+    constraints {
+        // org.owasp.dependencycheck needs at least this version of jackson. Other plugins pull in older versions..
+        add("implementation", "com.fasterxml.jackson:jackson-bom:2.16.1")
+
+        // org.owasp.dependencycheck needs these versions. Other plugins pull in older versions..
+        add("implementation", "org.apache.commons:commons-lang3:3.14.0")
+        add("implementation", "org.apache.commons:commons-text:1.11.0")
+    }
+}

clients/java/buildSrc/build.gradle.kts

@@ -0,0 +1,14 @@
+plugins {
+    kotlin("jvm")
+    id("org.jetbrains.dokka")
+}
+
+kotlin {
+    jvmToolchain(17)
+}
+
+tasks.register<Jar>("dokkaJavadocJar") {
+    dependsOn(tasks.dokkaJavadoc)
+    from(tasks.dokkaJavadoc.flatMap { it.outputDirectory })
+    archiveClassifier.set("javadoc")
+}

clients/java/buildSrc/src/main/kotlin/java-library-conventions.gradle.kts

@@ -14,6 +14,9 @@ publishing {
             create<MavenPublication>("maven") {
                 from(components["java"])
                 val displayName: String by extra
+                tasks.findByName("dokkaJavadocJar")?.let {
+                    artifact(it)
+                }
                 pom {
                     name.set(displayName)
                     description.set(project.description)
@@ -45,7 +48,7 @@ publishing {
     }
     repositories {
         maven {
-            url = uri(layout.buildDirectory.dir("staging-deploy"))
+            url = uri(rootProject.layout.buildDirectory.dir("m2"))
         }
     }
 }