clean up

Author: Satish-Pothabathula

.github/workflows/ci.yml

@@ -67,3 +67,41 @@ jobs:
         with:
           files: target/site/jacoco/jacoco.xml
           fail_ci_if_error: false
+
+  # Release runs only on 'graphql-client-*' tags, after 'build' succeeds — mirrors the
+  # CircleCI 'build-and-release' workflow so the project is built once, then deployed.
+  release:
+    name: release
+    needs: build
+    if: startsWith(github.ref, 'refs/tags/graphql-client-')
+    runs-on: ubuntu-latest
+    environment: maven-central
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Set up JDK 8
+        uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: '8'
+          cache: maven
+
+      - name: Import GPG key
+        run: echo "$GPG_PRIVATE_KEY" | base64 --decode | gpg --batch --import
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+
+      - name: Deploy to Maven Central
+        run: mvn -B -s .github/settings.xml clean deploy -P release-sign-artifacts
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+
+      - name: Remove GPG keyring
+        if: always()
+        run: rm -rf ~/.gnupg