chore: automatically release to Maven Central

Author: oetr

.github/workflows/prerelease.yaml

@@ -128,17 +128,27 @@ jobs:
         env:
           RELEASE_SIGNING_KEY_ID: ${{ secrets.RELEASE_SIGNING_KEY_ID }}
           RELEASE_SIGNING_KEY_PRIVATE: ${{ secrets.RELEASE_SIGNING_KEY_PRIVATE }}
-          MAVEN_USER: ${{ secrets.MAVEN_USER }}
-          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-        run: JAZZER_JAR_PATH="$(pwd)/_tmp/jazzer.jar" bazel run deploy
+        run: |
+          JAZZER_JAR_PATH="$(pwd)/_tmp/jazzer.jar" bazel run deploy
+          cd _tmp
+          tar -czvf jazzer-maven-central-bundle.tar.gz -C release com
 
+      # In case the something goes wrong, we can still re/upload the bundle manually
       - name: Upload Jazzer Bundle to Github Artifacts
         uses: actions/upload-artifact@v5
         with:
           name: jazzer-maven-central-bundle
-          path: _tmp/release
+          path: _tmp/jazzer-maven-central-bundle.tar.gz
           if-no-files-found: error
 
+      - name: Deploy to Maven Central
+        run: |
+           curl --request POST \
+                --verbose \
+                --header "Authorization: Bearer ${{ secrets.SONATYPE_BEARER_TOKEN }}" \
+                --form bundle=_tmp/jazzer-maven-central-bundle.tar.gz \
+                https://central.sonatype.com/api/v1/publisher/upload?publishingType=AUTOMATIC
+
   create_release:
     needs: build_release
     runs-on: ubuntu-24.04