Add release workflow

[fourlastor]

This PR adds a release workflow which is triggered upon pushing a new tag

[tommyettinger]

I don't think I should approve or block this until I hear from other people in the organization about our GH Actions protocol. I don't know enough about GH Actions to make an informed decision on my own.

[tommyettinger]

I really don't know the first thing about GH Actions, but since this is on the libgdx organization now, I think I need to get the OK from @Tom-Ski or someone else in the org before doing anything with third-party actions. I don't even know if softprops is third-party...

[tommyettinger]

This doesn't need to run ./gradlew clean first, right? Because each run is in a container?

[fourlastor]

That's correct

[fourlastor]

Testing on my fork to see how the action works:

• Release: https://github.com/fourlastor-forks/gdx-liftoff/releases/tag/v1.0.0
• Action: https://github.com/fourlastor-forks/gdx-liftoff/actions/runs/11739020771

[tommyettinger]

This looks really clean and nice! I do want to hear from someone else in the organization about our policies for GH Actions and whether this looks clean and nice to them, so I guess I'll ping @MobiDevelop and @Tom-Ski .

[MobiDevelop]

While I don't have a whole lot of experience with GH Actions... I don't personally have any problem with third party actions, presuming they are actively maintained and don't have any known security issues. I don't currently have time to review the action in question, but probably best that someone does so we have a good gauge on it.

[fourlastor]

I can testify on the actively maintained (the repository is updated quite often), as I've been using this action for quite some years on personal projects. Cannot vouch for the security part as that's not my area of expertise

[tommyettinger]

OK, this has been sitting for almost a month, and nobody has complained about it yet. I'll merge and we'll see how this goes when I push a new release.

[SonicGDX]

Seems that the organization blocks unverified third-party actions. https://github.com/libgdx/gdx-liftoff/actions/runs/12210843035

[tommyettinger]

Yep... Not sure what to do here, I think this unverified action is actually the GitHub-recommended replacement for one of their deprecated actions, so it is probably fine to permit it. I'd want to find docs for that, though.

[SonicGDX]

I think this unverified action is actually the GitHub-recommended replacement for one of their deprecated actions, so it is probably fine to permit it. I'd want to find docs for that, though.

It appears that is the case. They don't explicitly endorse it but they do list it alongside 3 other similar actions as being "Maintained Actions".

GitHub Action - Releases API

Please note: This repository is currently unmaintained by a team of developers at GitHub. The repository is here and you can use it as an example, or in Actions. However please be aware that we are not going to be updating issues or pull requests on this repository.

Maintained Actions:

elgohr/Github-Release-Action
marvinpinto/action-automatic-releases
softprops/action-gh-release
ncipollo/release-action

To reflect this state we’ve marked this repository as Archived.