Merge deploy and build into same workflow

.github/workflows/build.yml

@@ -168,9 +168,61 @@ jobs:
         mvn clean install -DskipTests
         ./build.sh pt test
 
-    - name: Archive Java src for deployment
-      if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    - name: Archive binaries
+      if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
       uses: actions/upload-artifact@v4
       with:
         name: src
         path: ${{ env.PT_DICT_HOME }}/results/java-lt/src
+
+  deploy:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      # Necessary since downloading artefacts with an 'overwrite' option is not supported
+      - name: Empty out src directory
+        run: rm -rf results/java-lt/src/*
+
+      - name: Download artefact from upstream workflow
+        uses: actions/download-artifact@v4
+        with:
+          name: src
+          path: results/java-lt/src/
+
+      - name: Set dictionary version
+        # TODO: remove 'test-' prefix!
+        run: echo "PT_DICT_VERSION=test-$(git describe --tags --abbrev=0 | sed 's/^v//g')" >> $GITHUB_ENV
+
+      - name: Set up JDK 11 for x64
+        uses: actions/setup-java@v3
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+          architecture: x64
+
+      - name: Import GPG Key
+        run: echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --batch --import
+
+      - name: Deploy to SonaType
+        env:
+          GPG_KEYNAME: ${{ secrets.GPG_KEYNAME }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+          SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
+          SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+        working-directory: results/java-lt
+        run: mvn clean deploy -P release -s ${{ github.workspace }}/results/java-lt/settings.xml
+
+      - name: Create Release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: Release ${{ github.ref }}
+          draft: false