WIP

.github/workflows/deploy.yml

@@ -0,0 +1,39 @@
+name: Publish package to GitHub Packages
+on:
+  push:
+  release:
+    types: [created]
+permissions:
+  contents: read
+jobs:
+  publish:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Install Harden-Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          disable-sudo: true
+          egress-policy: audit
+      # XXX: Explain why we have this separately.
+      - name: Set up latest JDK
+        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+        with:
+          java-version: 25-ea
+          distribution: temurin
+      - name: Check out code and set up JDK and Maven
+        uses: s4u/setup-maven-action@9a27433d289dd99d73851f653607c39d3444e8ba # v1.17.0
+        with:
+          java-version: 17
+          java-distribution: temurin
+          maven-version: 3.9.9
+      - name: Debug
+        run: cat ~/.m2/toolchains.xml
+      - name: Publish package
+        run: mvn -B deploy -DaltDeploymentRepository=github::https://maven.pkg.github.com/PicnicSupermarket/error-prone
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Remove installed project artifacts
+        run: mvn dependency:purge-local-repository -DmanualInclude='${project.groupId}' -DresolutionFuzziness=groupId

pom.xml

@@ -303,7 +303,7 @@
           <toolchains>
             <jdk>
               <version>17</version>
-              <version>25</version>
+              <version>25-ea</version>
             </jdk>
           </toolchains>
         </configuration>