java-jq icon indicating copy to clipboard operation
java-jq copied to clipboard

Build from source, and automate publication to `maven`

Open Pamplemousse opened this issue 2 years ago • 0 comments

From https://github.com/arakelian/java-jq/issues/22, https://github.com/arakelian/java-jq/issues/21#issuecomment-1613340351, I gather that the process of publishing a new version to maven is currently manually done by yourself @arakelian .

Also, *.so files, (supposedly) compiled from source, are vendored in https://github.com/arakelian/java-jq/tree/main/src/main/resources/lib. As a consequence, it takes one to trust maintainers and contributors to not distribute malware.

Leveraging GitHub actions, it would be possible to: 1) build *.so files from source; 2) publish to maven. This would remove the need to trust maintainers and contributors to trust only the build steps and GH action environment. Also, this could simplify the maintenance burden.

Pamplemousse avatar Dec 13 '23 13:12 Pamplemousse