deploy and release CI workflows (DE-438)

Author: rashtao

.github/workflows/codeql.yml

@@ -15,10 +15,18 @@ on:
   push:
     branches:
       - master
+    paths-ignore:
+      - '.github/**'
+      - 'docker/**'
+      - 'docs/**'
+      - 'tutorial/**'
+      - 'ChangeLog.md'
+      - 'README.md'
   pull_request:
     types: [ opened, synchronize, reopened ]
     branches:
       - master
+      - main
       - v7
       - v6
   schedule:

.github/workflows/publish.yml renamed to .github/workflows/maven-deploy.yml

@@ -1,12 +1,12 @@
-name: Publish
+name: Deploy
 
 on:
   workflow_dispatch:
   push:
-    tags: [ v** ]
+    tags: [ deploy** ]
 
 jobs:
-  verify:
+  deploy:
     timeout-minutes: 20
     runs-on: ubuntu-latest
 

.github/workflows/maven-release.yml

@@ -0,0 +1,34 @@
+name: Release
+
+on:
+  workflow_dispatch:
+  push:
+    tags: [ release** ]
+
+jobs:
+  release:
+    timeout-minutes: 20
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up JDK
+        uses: actions/setup-java@v3
+        with:
+          java-version: '8'
+          distribution: 'adopt'
+          cache: 'maven'
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_CENTRAL_TOKEN
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+      - name: Release to Apache Maven Central
+        run: mvn -Ddeploy -Dmaven.test.skip=true nexus-staging:release
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          MAVEN_CENTRAL_TOKEN: ${{ secrets.OSSRH_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}

.github/workflows/maven.yml renamed to .github/workflows/test.yml

@@ -1,13 +1,21 @@
-name: Java CI
+name: Test
 
 on:
   push:
     branches:
       - master
+    paths-ignore:
+      - '.github/**'
+      - 'docker/**'
+      - 'docs/**'
+      - 'tutorial/**'
+      - 'ChangeLog.md'
+      - 'README.md'
   pull_request:
     types: [ opened, synchronize, reopened ]
     branches:
       - master
+      - main
       - v7
       - v6