Version and publish from git tags in one Build workflow

Match the other Exceptionless builds: MinVer computes the version from v*
tags and every job builds with it (-Drevision). A v* tag publishes that
version to Maven Central after the tests, end-to-end tests and the Spring
Boot 4 job pass; other pushes publish a preview build to GitHub Packages;
pull requests only build and test. release.yml is folded into build.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: ejsmith

.github/workflows/build.yml

@@ -1,8 +1,15 @@
 name: Build
 
+# Versions come from git tags (MinVer), like the other Exceptionless builds:
+# - A v* tag (v2.0.0, v2.1.0-beta.1) builds that version and publishes it to Maven Central.
+# - Other pushes build a pre-release version, such as 2.0.1-preview.0.12 on main or
+#   2.0.1-preview.my-branch.0.12 on a branch, and publish it to GitHub Packages.
+# - Pull requests build and test only.
+#
+# Required secrets for releases: CENTRAL_USERNAME and CENTRAL_PASSWORD (a Central Portal user
+# token), GPG_PRIVATE_KEY and GPG_PASSPHRASE.
 on:
   push:
-    branches: [main]
   pull_request:
   workflow_dispatch:
 
@@ -11,11 +18,61 @@ permissions:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  # Never cancel a tag build; it may be publishing a release.
+  cancel-in-progress: ${{ !startsWith(github.ref, 'refs/tags/') }}
+
+defaults:
+  run:
+    shell: bash
+
+env:
+  MAVEN_ARGS: --batch-mode --no-transfer-progress
 
 jobs:
+  version:
+    name: Version
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+
+      - name: Set up .NET for MinVer
+        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0
+        with:
+          dotnet-version: 10.0.x
+
+      - name: Compute version
+        id: version
+        run: |
+          # Pre-release versions from branches other than main, maintenance branches (2.x, 2.1),
+          # tags and pull requests carry the branch name.
+          branch="${GITHUB_REF##*/}"
+          if [[ "$GITHUB_REF" != refs/heads/* || "$branch" == main || "$branch" =~ ^[0-9]+\.(x|[0-9]+)$ ]]; then
+            branch=""
+          fi
+          branch="$(tr -c 'A-Za-z0-9-' '-' <<< "$branch" | sed -E 's/-+$//')"
+          suffix="${branch:+$branch.}"
+
+          dotnet tool install --global minver-cli --version 8.0.0
+          version="$(minver --tag-prefix v --default-pre-release-identifiers "preview.${suffix}0" --minimum-major-minor 2.0)"
+
+          # After a pre-release tag (v2.1.0-beta.1) MinVer appends only the height; add the branch.
+          if [[ -n "$branch" && "$version" != *"$branch"* ]]; then
+            version="$(sed -E "s/\.([0-9]+)$/.${suffix}\1/" <<< "$version")"
+          fi
+
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+          echo "### Version: $version" >> "$GITHUB_STEP_SUMMARY"
+          echo "Version: $version (ref: $GITHUB_REF, event: $GITHUB_EVENT_NAME)"
+
   build:
     name: JDK ${{ matrix.java }} on ${{ matrix.os }}
+    needs: version
     runs-on: ${{ matrix.os }}
     timeout-minutes: 30
     strategy:
@@ -40,7 +97,9 @@ jobs:
           cache: maven
 
       - name: Build and test
-        run: ./mvnw -B -ntp verify
+        run: ./mvnw verify -Drevision="$VERSION"
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
 
       - name: Upload test reports
         if: failure()
@@ -51,29 +110,116 @@ jobs:
 
   spring-boot-4:
     name: Spring Boot 4 compatibility
+    needs: version
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up JDK
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
         with:
           distribution: temurin
           java-version: 21
           cache: maven
+
       - name: Test the starter against Spring Boot 4
-        run: ./mvnw -B -ntp -pl exceptionless-spring-boot-starter -am verify -Pspring-boot-4
+        run: ./mvnw -pl exceptionless-spring-boot-starter -am verify -Pspring-boot-4 -Drevision="$VERSION"
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
 
   e2e:
     name: End-to-end (real Exceptionless server)
+    needs: version
     runs-on: ubuntu-latest
     timeout-minutes: 45
+    # Every push (so every published build) and pull requests labeled e2e.
     if: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'e2e')
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up JDK
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
         with:
           distribution: temurin
           java-version: 21
           cache: maven
+
       - name: Run end-to-end tests
-        run: ./mvnw -B -ntp -pl exceptionless-e2e-tests -am verify -De2e=true
+        run: ./mvnw -pl exceptionless-e2e-tests -am verify -De2e=true -Drevision="$VERSION"
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
+
+  publish-ci:
+    name: Publish CI packages
+    needs: [version, build, spring-boot-4, e2e]
+    if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/heads/') && github.actor != 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up JDK
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+        with:
+          distribution: temurin
+          java-version: 21
+          cache: maven
+          server-id: github
+          server-username: GITHUB_ACTOR
+          server-password: GITHUB_TOKEN
+
+      - name: Publish to GitHub Packages
+        # A CI package is a convenience; failing to publish one doesn't fail the build.
+        continue-on-error: true
+        run: >-
+          ./mvnw deploy -DskipTests -Drevision="$VERSION"
+          -DaltDeploymentRepository="github::https://maven.pkg.github.com/$GITHUB_REPOSITORY"
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
+          GITHUB_TOKEN: ${{ github.token }}
+
+  release:
+    name: Publish to Maven Central
+    needs: [version, build, spring-boot-4, e2e]
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Check the version matches the tag
+        run: |
+          if [[ "$VERSION" != "${GITHUB_REF_NAME#v}" ]]; then
+            echo "::error::Tag $GITHUB_REF_NAME is not a version tag (computed version: $VERSION)."
+            exit 1
+          fi
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
+
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up JDK
+        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
+        with:
+          distribution: temurin
+          java-version: 21
+          cache: maven
+          server-id: central
+          server-username: CENTRAL_USERNAME
+          server-password: CENTRAL_PASSWORD
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE
+
+      - name: Publish to Maven Central
+        run: ./mvnw deploy -Prelease -DskipTests -Drevision="$VERSION"
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
+          CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
+          CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

.github/workflows/release.yml

@@ -44,7 +44,15 @@ Test helpers shared between modules (`FakeServer`, `TestClients`) live in
   (`Duration`, `InstantSource`) instead of numbers, immutable collections from getters, and plain
   JavaBeans (`void` setters) for the mutable models.
 
-## Releasing
-
-Push a tag like `v2.0.0`. The release workflow builds, signs and publishes every module to Maven Central
-and creates a GitHub release.
+## Versions and releases
+
+Versions come from git tags through [MinVer](https://github.com/adamralph/minver), the same as the
+other Exceptionless builds. Local builds are `2.0.0-SNAPSHOT`; CI passes the computed version as
+`-Drevision`.
+
+- To release, push a tag such as `v2.0.0` or `v2.1.0-beta.1`, or create a GitHub release with one. The
+  Build workflow tests that commit and publishes every module to Maven Central under the tag's version.
+- Every other push publishes a pre-release build to GitHub Packages, versioned from the latest tag:
+  `2.0.1-preview.0.12` on `main`, `2.0.1-preview.my-branch.0.12` on a branch.
+- Pull requests build and test only. Add the `e2e` label to also run the end-to-end tests; pushes
+  always run them.