GHA updates

Author: aSemy

.github/workflows/run_gradle_task.yml

@@ -11,11 +11,11 @@ on:
         required: true
         type: string
       runs-on:
-        description: "OSes to run the task on"
+        description: "OS to run the task on"
         required: true
         type: string
       checkout-ref:
-        description: "The repository reference to checkout"
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
         required: false
         type: string
   workflow_call:
@@ -25,11 +25,11 @@ on:
         required: true
         type: string
       runs-on:
-        description: "OSes to run the task on"
+        description: "OS to run the task on"
         required: true
         type: string
       checkout-ref:
-        description: "The repository reference to checkout"
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
         required: false
         type: string
 

.github/workflows/run_publish_maven.yml

@@ -5,13 +5,13 @@ on:
   workflow_dispatch:
     inputs:
       checkout-ref:
-        description: "The repository reference to checkout"
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
         required: false
         type: string
   workflow_call:
     inputs:
       checkout-ref:
-        description: "The repository reference to checkout"
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
         required: false
         type: string
 

.github/workflows/run_tests.yml

@@ -3,7 +3,17 @@ name: Tests
 
 on:
   workflow_dispatch:
+    inputs:
+      checkout-ref:
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
+        required: false
+        type: string
   workflow_call:
+    inputs:
+      checkout-ref:
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
+        required: false
+        type: string
 
 
 concurrency:

.github/workflows/workflow_release.yml

@@ -5,7 +5,7 @@ on:
   workflow_dispatch:
     inputs:
       checkout-ref:
-        description: "The repository reference to checkout"
+        description: "The branch, tag or SHA to checkout. See actions/checkout 'ref'."
         required: false
         type: string
   push:
@@ -15,7 +15,7 @@ on:
 
 
 concurrency:
-  group: "Releases: ${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  group: "Releases: ${{ github.workflow }} @ ${{ inputs.checkout-ref }} ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
   cancel-in-progress: true
 
 
@@ -24,17 +24,20 @@ jobs:
   tests:
     uses: ./.github/workflows/run_tests.yml
     permissions:
-      contents: read
       checks: write
+      contents: read
+    with:
+      checkout-ref: ${{ inputs.checkout-ref }}
 
   publish-maven:
     needs: tests
-    if: github.ref == 'refs/heads/main'
+    # only publish when manually triggered, or it's the main branch, or it's for a release
+    if: inputs.checkout-ref || github.ref == 'refs/heads/main' || (github.event_name == 'release' && github.event.action == 'created')
     uses: ./.github/workflows/run_publish_maven.yml
     secrets: inherit
     permissions:
+      checks: write
       contents: write
       packages: write
-      checks: write
     with:
       checkout-ref: ${{ inputs.checkout-ref }}