feat: add Docker image publishing workflow for Maven artifacts

- Configured `build.gradle.kts` to support publishing Maven artifacts to a local image-specific repository.
- Added a Dockerfile for packaging Maven artifacts into a lightweight Docker image.
- Updated `.github/workflows/release.yml` to automate the Docker image build and publish process.
- Configured `.dockerignore` to optimize build context and exclude unnecessary files.

Author: CoderYellow

.dockerignore

@@ -0,0 +1,8 @@
+**
+!build/
+!build/image/
+!build/image/m2/
+!build/image/m2/repository/
+!build/image/m2/repository/**
+!docker/
+!docker/maven-artifacts.Dockerfile

.github/workflows/release.yml

@@ -71,3 +71,51 @@ jobs:
           SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
         run: |
           ./gradlew --no-configuration-cache release $EXTRA_GRADLE_ARGS
+
+      - name: Checkout release tag
+        run: |
+          git fetch --tags --force
+          release_tag="$(git describe --tags --abbrev=0)"
+          echo "RELEASE_TAG=$release_tag" >> "$GITHUB_ENV"
+          git checkout "$release_tag"
+
+      - name: Read release version
+        run: |
+          release_version="$(sed -n 's/^version=//p' gradle.properties)"
+          echo "RELEASE_VERSION=$release_version" >> "$GITHUB_ENV"
+
+      - name: Set image name
+        run: |
+          echo "IMAGE_NAME=ghcr.io/${GITHUB_REPOSITORY,,}/maven-artifacts" >> "$GITHUB_ENV"
+
+      - name: Publish Maven artifacts for image
+        env:
+          SIGNING_KEY_FILE: ${{ runner.temp }}/signing-key.asc
+          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
+        run: |
+          ./gradlew --no-configuration-cache publishMavenArtifactsForImage
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Publish Maven artifacts image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/maven-artifacts.Dockerfile
+          push: true
+          tags: |
+            ${{ env.IMAGE_NAME }}:${{ env.RELEASE_VERSION }}
+            ${{ env.IMAGE_NAME }}:${{ env.RELEASE_TAG }}
+            ${{ env.IMAGE_NAME }}:latest
+          labels: |
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.revision=${{ github.sha }}
+            org.opencontainers.image.version=${{ env.RELEASE_VERSION }}

build.gradle.kts

@@ -83,6 +83,13 @@ subprojects {
         }
 
         extensions.configure<PublishingExtension>("publishing") {
+            repositories {
+                maven {
+                    name = "imageMaven"
+                    url = rootProject.layout.buildDirectory.dir("image/m2/repository").get().asFile.toURI()
+                }
+            }
+
             publications {
                 if (project.name != "plugin" && findByName("mavenJava") == null) {
                     create<MavenPublication>("mavenJava") {
@@ -150,6 +157,12 @@ subprojects {
     }
 }
 
+tasks.register("publishMavenArtifactsForImage") {
+    group = "publishing"
+    description = "Publishes all Maven publications into build/image/m2/repository for the Docker image."
+    dependsOn(subprojects.map { "${it.path}:publishAllPublicationsToImageMavenRepository" })
+}
+
 nexusPublishing {
     repositories {
         sonatype {

docker/maven-artifacts.Dockerfile

@@ -0,0 +1,4 @@
+FROM gcr.io/distroless/java17-debian13
+
+WORKDIR /root/.m2/repository
+COPY build/image/m2/repository/ /root/.m2/repository/