Put the Gradle plugins' jar in the GitHub release, signed like the rest

The draft GitHub release carried the runnable jar, the IntelliJ and
Eclipse plugins and the native binaries, each with its signature. Now
jreleaserRelease also builds the Gradle plugins' jar and attaches it
with a signature from the release key, and its checksum goes into
checksums_sha256.txt. The copy on the Gradle Plugin Portal is not
signed.

A dry run of the GitHub target lists the jar and its .asc for upload.
The jar builds reproducibly: two clean builds give the same SHA-256.

Author: abashev

.github/workflows/release.yml

@@ -9,7 +9,8 @@ name: Release
 # fails publishes nothing, and its deployments can be dropped in the Portal.
 #
 # Once Maven Central serves both, the Gradle plugins go to the Gradle Plugin Portal. After publishing, a
-# draft GitHub release on the tag collects the runnable jar, the IDE plugins and the native binaries.
+# draft GitHub release on the tag collects the runnable jar, the Gradle and IDE plugins and the native
+# binaries.
 #
 # Needs six repository secrets: JRELEASER_MAVENCENTRAL_USERNAME and JRELEASER_MAVENCENTRAL_PASSWORD (the
 # Central Portal user token), JRELEASER_GPG_SECRET_KEY and JRELEASER_GPG_PASSPHRASE, and
@@ -267,10 +268,11 @@ jobs:
           GRADLE_PUBLISH_KEY: ${{ secrets.GRADLE_PUBLISH_KEY }}
           GRADLE_PUBLISH_SECRET: ${{ secrets.GRADLE_PUBLISH_SECRET }}
 
-  # What Maven Central does not carry — the runnable formatter jar, the IntelliJ plugin zip, the Eclipse
-  # plugin jar, and every platform's native binary as a plain download — goes into a draft GitHub release
-  # on the tag, each file signed with the release key. Only once both deployments are published; publishing
-  # the draft is a click on GitHub, and a re-run fails while a release for the tag exists.
+  # What Maven Central does not carry — the runnable formatter jar, the Gradle plugins' jar, the IntelliJ
+  # plugin zip, the Eclipse plugin jar, and every platform's native binary as a plain download — goes into
+  # a draft GitHub release on the tag, each file signed with the release key. Only once both deployments
+  # are published; publishing the draft is a click on GitHub, and a re-run fails while a release for the
+  # tag exists.
   github-release:
     name: draft GitHub release
     needs: publish
@@ -295,7 +297,7 @@ jobs:
           pattern: native-image-*
           merge-multiple: true
 
-      - name: Build the IDE plugins and open the draft release
+      - name: Build the plugins and open the draft release
         run: ./gradlew -PreleaseTarget=github -PnativeImages=native-images jreleaserRelease
         env:
           JRELEASER_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

README.md

@@ -23,7 +23,7 @@ and published from this repository.
 | [Maven Central](https://central.sonatype.com/namespace/dev.openjavaformat) | `dev.openjavaformat:open-java-format`, with `-spi`, `-native` and `-jdk-bootstrap` |
 | [Gradle Plugin Portal](https://plugins.gradle.org/plugin/dev.openjavaformat.java-format) | `dev.openjavaformat.java-format` |
 | [JetBrains Marketplace](https://plugins.jetbrains.com/plugin/34359-open-java-format) | the IntelliJ IDEA plugin |
-| [GitHub Releases](https://github.com/openjavaformat/open-java-format/releases/latest) | native binaries, a runnable jar, the IntelliJ and Eclipse plugins, every file signed |
+| [GitHub Releases](https://github.com/openjavaformat/open-java-format/releases/latest) | native binaries, a runnable jar, the Gradle, IntelliJ and Eclipse plugins, every file signed |
 
 Why the project exists is in the [manifesto](https://openjavaformat.dev/manifesto/).
 

buildSrc/src/main/groovy/open-java-format.release-conventions.gradle

@@ -12,18 +12,19 @@ plugins {
 // collected, the default deploys the jars; on a tag both read the same version from it.
 //
 // `-PreleaseTarget=github` deploys nothing. It is for `jreleaserRelease`, which opens a draft GitHub
-// release on the tag with what Maven Central does not carry — the runnable formatter jar, the IntelliJ
-// plugin zip, the Eclipse plugin jar and every platform's native binary as a plain download — each file
-// signed, plus a checksum file.
+// release on the tag with what Maven Central does not carry — the runnable formatter jar, the Gradle
+// plugins' jar, the IntelliJ plugin zip, the Eclipse plugin jar and every platform's native binary as a
+// plain download — each file signed, plus a checksum file.
 //
 // Publishing is a run of its own: with JRELEASER_MAVENCENTRAL_DEPLOYMENT_ID set, JReleaser publishes that
 // deployment, which an earlier run uploaded and the Portal validated, and nothing is built. The ID has to
 // be an environment variable: JReleaser 1.26 drops a deploymentId set in the DSL. The release workflow
 // uploads both deployments first and publishes them only once both are in, so a version whose native
 // build fails publishes nothing.
 //
-// gradle-open-java-format is not released here: the release workflow publishes its plugins to the Gradle
-// Plugin Portal once Maven Central serves the jars and native images they depend on.
+// gradle-open-java-format is not deployed here: the release workflow publishes its plugins to the Gradle
+// Plugin Portal once Maven Central serves the jars and native images they depend on. The GitHub release
+// carries its jar too, built from the same tag.
 def releaseTarget = providers.gradleProperty('releaseTarget').getOrElse('jars')
 def deploymentToPublish = providers.environmentVariable('JRELEASER_MAVENCENTRAL_DEPLOYMENT_ID').getOrNull()
 def releasedProjects
@@ -108,6 +109,9 @@ jreleaser {
             artifact {
                 path = 'open-java-format/build/libs/open-java-format-{{projectVersion}}-all.jar'
             }
+            artifact {
+                path = 'gradle-open-java-format/build/libs/gradle-open-java-format-{{projectVersion}}.jar'
+            }
             artifact {
                 path = 'open-java-format-idea-plugin/build/distributions/open-java-format-idea-plugin-{{projectVersion}}.zip'
             }
@@ -163,8 +167,8 @@ tasks.named('jreleaserDeploy') {
 
 tasks.named('jreleaserRelease') {
     if (releaseTarget == 'github') {
-        dependsOn ':open-java-format:allJar', ':open-java-format-idea-plugin:buildPlugin',
-                ':open-java-format-eclipse-plugin:jar'
+        dependsOn ':open-java-format:allJar', ':gradle-open-java-format:jar',
+                ':open-java-format-idea-plugin:buildPlugin', ':open-java-format-eclipse-plugin:jar'
     }
 }