Release

.github/actions/docker-image-cache/restore/action.yml

@@ -43,5 +43,12 @@ runs:
           printf "%s\n" "${preinstalled_image_ids[@]}" > ~/.cache/docker-preinstalled/ids-${{ github.run_id }}.txt
         fi
 
-        echo "Importing cache"
-        docker load -i ~/.cache/docker/images.tar && echo "Restored docker image cache" && docker image ls || true
+        if [ -f ~/.cache/docker/images.tar ]; then
+          echo "Importing cache"
+          docker load -i ~/.cache/docker/images.tar && echo "Restored docker image cache" && docker image ls || true
+
+          echo "Deleting cache file to free up disk space"
+          rm -f ~/.cache/docker/images.tar || true
+        else
+          echo "No file cache file found"
+        fi

.github/workflows/check-build.yml

@@ -19,9 +19,6 @@ on:
       - '.idea/**'
       - 'assets/**'
 
-env:
-  DEMO_MAVEN_MODULE: ${{ github.event.repository.name }}-demo
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -33,22 +30,23 @@ jobs:
     steps:
     - uses: actions/checkout@v7
 
-    - name: Set up JDK
-      uses: actions/setup-java@v6
-      with:
-        distribution: ${{ matrix.distribution }}
-        java-version: ${{ matrix.java }}
-
-    - name: Cache Maven
-      uses: actions/cache@v6
-      with:
-        path: ~/.m2/repository
-        key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-mvn-build-
+    - parallel:
+      - name: Set up JDK
+        uses: actions/setup-java@v6
+        with:
+          distribution: ${{ matrix.distribution }}
+          java-version: ${{ matrix.java }}
+
+      - name: Cache Maven
+        uses: actions/cache@v6
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-mvn-build-
 
     - name: Build with Maven
-      run: ./mvnw -B clean package -P ignore-service-loading
+      run: ./mvnw -B clean package -P ignore-service-loading -T2C
 
     - name: Check for uncommited changes
       run: |
@@ -79,27 +77,28 @@ jobs:
     steps:
     - uses: actions/checkout@v7
 
-    - name: Set up JDK
-      uses: actions/setup-java@v6
-      with:
-        distribution: ${{ matrix.distribution }}
-        java-version: ${{ matrix.java }}
-
-    - name: Cache Maven
-      uses: actions/cache@v6
-      with:
-        path: ~/.m2/repository
-        key: ${{ runner.os }}-mvn-checkstyle-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-mvn-checkstyle-
-
-    - name: CheckStyle Cache
-      uses: actions/cache@v6
-      with:
-        path: '**/target/checkstyle-cachefile'
-        key: ${{ runner.os }}-checkstyle-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-checkstyle-
+    - parallel:
+      - name: Set up JDK
+        uses: actions/setup-java@v6
+        with:
+          distribution: ${{ matrix.distribution }}
+          java-version: ${{ matrix.java }}
+
+      - name: Cache Maven
+        uses: actions/cache@v6
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-mvn-checkstyle-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-mvn-checkstyle-
+
+      - name: CheckStyle Cache
+        uses: actions/cache@v6
+        with:
+          path: '**/target/checkstyle-cachefile'
+          key: ${{ runner.os }}-checkstyle-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-checkstyle-
 
     - name: Run Checkstyle
       run: ./mvnw -B checkstyle:check -P checkstyle -T2C
@@ -115,33 +114,34 @@ jobs:
     steps:
     - uses: actions/checkout@v7
 
-    - name: Set up JDK
-      uses: actions/setup-java@v6
-      with:
-        distribution: ${{ matrix.distribution }}
-        java-version: ${{ matrix.java }}
-
-    - name: Cache Maven
-      uses: actions/cache@v6
-      with:
-        path: ~/.m2/repository
-        key: ${{ runner.os }}-mvn-pmd-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-mvn-pmd-
-
-    - name: PMD Cache
-      uses: actions/cache@v6
-      with:
-        path: '**/target/pmd/pmd.cache'
-        key: ${{ runner.os }}-pmd-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-pmd-
+    - parallel:
+      - name: Set up JDK
+        uses: actions/setup-java@v6
+        with:
+          distribution: ${{ matrix.distribution }}
+          java-version: ${{ matrix.java }}
+
+      - name: Cache Maven
+        uses: actions/cache@v6
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-mvn-pmd-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-mvn-pmd-
+
+      - name: PMD Cache
+        uses: actions/cache@v6
+        with:
+          path: '**/target/pmd/pmd.cache'
+          key: ${{ runner.os }}-pmd-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-pmd-
 
     - name: Run PMD
-      run: ./mvnw -B test pmd:aggregate-pmd-no-fork pmd:check -P pmd -DskipTests -T2C
+      run: ./mvnw -B test pmd:aggregate-pmd-no-fork pmd:check -P pmd -T2C
 
     - name: Run CPD (Copy Paste Detector)
-      run: ./mvnw -B pmd:aggregate-cpd pmd:cpd-check -P pmd -DskipTests -T2C
+      run: ./mvnw -B pmd:aggregate-cpd pmd:cpd-check -P pmd -T2C
 
     - name: Upload report
       if: ${{ !cancelled() }}

.github/workflows/release.yml

@@ -4,10 +4,6 @@ on:
   push:
     branches: [ master ]
 
-permissions:
-  contents: write
-  pull-requests: write
-
 # DO NOT RESTORE CACHE for critical release steps to prevent a (extremely unlikely) scenario 
 # where a supply chain attack could be achieved due to poisoned cache
 jobs:
@@ -17,23 +13,25 @@ jobs:
     steps:
     - uses: actions/checkout@v7
 
-    - name: Set up JDK
-      uses: actions/setup-java@v6
-      with:
-        java-version: '25'
-        distribution: 'temurin'
-
-    # Try to reuse existing cache from check-build
-    - name: Try restore Maven Cache
-      uses: actions/cache/restore@v6
-      with:
-        path: ~/.m2/repository
-        key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
-        restore-keys: |
-          ${{ runner.os }}-mvn-build-
+    - parallel:
+      - name: Set up JDK
+        uses: actions/setup-java@v6
+        with:
+          java-version: '25'
+          distribution: 'temurin'
+
+      # Try to reuse existing cache from check-build
+      - name: Try restore Maven Cache
+        uses: actions/cache/restore@v6
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-mvn-build-
 
     - name: Build with Maven
-      run: ./mvnw -B clean package -P ignore-service-loading -T2C
+      run: ../mvnw -B clean package -P ignore-service-loading -T2C
+      working-directory: src
 
     - name: Check for uncommited changes
       run: |
@@ -57,6 +55,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: [check-code]
     timeout-minutes: 10
+    permissions:
+      contents: write
     outputs:
       upload_url: ${{ steps.create-release.outputs.upload_url }}
     steps:
@@ -73,7 +73,7 @@ jobs:
     - name: Get version
       id: version
       run: |
-        version=$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)
+        version=$(./mvnw -B help:evaluate -Dexpression=project.version -q -DforceStdout)
         echo "release=$version" >> $GITHUB_OUTPUT
         echo "releasenumber=${version//[!0-9]/}" >> $GITHUB_OUTPUT
 
@@ -127,18 +127,13 @@ jobs:
         distribution: 'temurin'
         java-version: '25'
         server-id: github-central
-        server-password: PACKAGES_CENTRAL_TOKEN
-        gpg-passphrase: MAVEN_GPG_PASSPHRASE
+        server-password-env-var: PACKAGES_CENTRAL_TOKEN
+        gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
         gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} # Only import once
 
-    - name: Publish to GitHub Packages
-      run: |
-        modules=("bom")
-        dependency_management_block=$(grep -ozP '<dependencyManagement>(\r|\n|.)*<\/dependencyManagement>' 'bom/pom.xml' | tr -d '\0')
-        modules+=($(echo $dependency_management_block | grep -oP '(?<=<artifactId>)[^<]+'))
-        printf -v modules_joined '%s,' "${modules[@]}"
-        modules_arg=$(echo "${modules_joined%,}")
-        ./mvnw -B deploy -pl "$modules_arg" -am -T2C -P publish -DskipTests -DaltDeploymentRepository=github-central::https://maven.pkg.github.com/xdev-software/central
+    - name: Publish to GitHub Packages Central
+      run: ../mvnw -B deploy -P publish -DaltDeploymentRepository=github-central::https://maven.pkg.github.com/xdev-software/central
+      working-directory: src
       env:
         PACKAGES_CENTRAL_TOKEN: ${{ secrets.PACKAGES_CENTRAL_TOKEN }}
         MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
@@ -149,24 +144,19 @@ jobs:
         distribution: 'temurin'
         java-version: '25'
         server-id: sonatype-central-portal
-        server-username: MAVEN_CENTRAL_USERNAME
-        server-password: MAVEN_CENTRAL_TOKEN
-        gpg-passphrase: MAVEN_GPG_PASSPHRASE
+        server-username-env-var: MAVEN_CENTRAL_USERNAME
+        server-password-env-var: MAVEN_CENTRAL_TOKEN
+        gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
 
     - name: Publish to Central Portal
-      run: |
-        modules=("bom")
-        dependency_management_block=$(grep -ozP '<dependencyManagement>(\r|\n|.)*<\/dependencyManagement>' 'bom/pom.xml' | tr -d '\0')
-        modules+=($(echo $dependency_management_block | grep -oP '(?<=<artifactId>)[^<]+'))
-        printf -v modules_joined '%s,' "${modules[@]}"
-        modules_arg=$(echo "${modules_joined%,}")
-        ./mvnw -B deploy -pl "$modules_arg" -am -T2C -P publish,publish-sonatype-central-portal -DskipTests
+      run: ../mvnw -B deploy -P publish,publish-sonatype-central-portal
+      working-directory: src
       env:
         MAVEN_CENTRAL_USERNAME: ${{ secrets.SONATYPE_MAVEN_CENTRAL_PORTAL_USERNAME }}
         MAVEN_CENTRAL_TOKEN: ${{ secrets.SONATYPE_MAVEN_CENTRAL_PORTAL_TOKEN }}
         MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
 
-  publish-pages:
+  build-pages:
     runs-on: ubuntu-latest
     needs: [prepare-release]
     timeout-minutes: 15
@@ -199,29 +189,57 @@ jobs:
         sed -i '/<module>.*-demo<\/module>/d' pom.xml
 
     - name: Build site
-      run: ./mvnw -B compile site -DskipTests -T2C
-
+      run: ../mvnw -B compile site -P site -T2C
+      working-directory: src
+
     - name: Aggregate site
       run: |
-        modules=($(grep -ozP '(?<=module>)[^<]+' 'pom.xml' | tr -d '\0'))
-        for m in "${modules[@]}"
+        module_dirs=$(../mvnw -B -q --also-make exec:exec -Dexec.executable="pwd")
+        for m in "${module_dirs[@]}"
         do
-            echo "$m/target/site -> ./target/$m"
-            mkdir -p ./target/$m
-            cp -r $m/target/site ./target/$m
+          echo "$m/target/site -> ./target/$m"
+          mkdir -p ./target/$m
+          cp -r $m/target/site ./target/$m
         done
+      working-directory: src
+
+    - name: Upload pages artifact
+      uses: actions/upload-pages-artifact@v5
+      with:
+        path: src/target/site
 
     - name: Deploy to Github pages
       uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
-        publish_dir: ./target/site
+        publish_dir: ./src/target/site
         force_orphan: true
 
+  deploy-pages:
+    runs-on: ubuntu-latest
+    needs: [build-pages]
+    timeout-minutes: 10
+    concurrency:
+      group: 'pages'
+      cancel-in-progress: false
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+    - name: Deploy to GitHub Pages
+      id: deployment
+      uses: actions/deploy-pages@v5
+
   after-release:
     runs-on: ubuntu-latest
     needs: [publish-maven]
     timeout-minutes: 10
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
     - uses: actions/checkout@v7