Add automated release job to GitHub Actions workflow

Adds a new release job that triggers when commit message contains [release]
and runs the complete release process after all tests pass successfully.

Features:
- Conditional execution based on '[release]' in commit message
- Depends on both build and test jobs completing successfully
- Runs release.sh script with proper error handling
- 10 minute timeout for efficient release process
- Proper permissions for GitHub releases

The release.sh script executes:
- make clean assemble upload deploy
- make release-plugins
- make release

Usage: Include '[release]' in commit message to trigger automated release

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Paolo Di Tommaso <paolo.ditommaso@gmail.com>

Author: pditommaso

.github/workflows/build.yml

@@ -229,3 +229,44 @@ jobs:
             env:
                 GITHUB_TOKEN: ${{ secrets.AUTOMATION_GITHUB_TOKEN }}
                 GRADLE_OPTS: '-Dorg.gradle.daemon=false'
+
+  release:
+    if: ${{ contains(needs.build.outputs.commit_message, '[release]') }}
+    needs: [build, test]
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      actions: write
+      contents: write
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          submodules: true
+
+      - name: Setup env
+        run: |
+          rm -f $HOME/.gitconfig;
+          mkdir -p "$HOME/.nextflow";
+          echo "providers.github.auth='$NXF_GITHUB_ACCESS_TOKEN'" > "$HOME/.nextflow/scm"
+        env:
+          NXF_GITHUB_ACCESS_TOKEN: ${{ secrets.NXF_GITHUB_ACCESS_TOKEN }}
+
+      - name: Setup Java 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: 17
+          distribution: 'temurin'
+          architecture: x64
+          cache: gradle
+
+      - name: Run release
+        run: |
+          echo "Starting release process..."
+          bash release.sh
+        env:
+          GRADLE_OPTS: '-Dorg.gradle.daemon=false'
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Add any additional secrets needed for release

release.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+set -e
+set -x
+
+echo "=== Starting Nextflow Release Process ==="
+echo "Commit message: ${GITHUB_HEAD_COMMIT_MESSAGE:-$(git log -1 --pretty=format:'%s')}"
+
+# Verify we're in release mode
+if [[ ! "${GITHUB_HEAD_COMMIT_MESSAGE:-$(git log -1 --pretty=format:'%s')}" =~ \[release\] ]]; then
+    echo "ERROR: This script should only be run when commit message contains '[release]'"
+    exit 1
+fi
+
+echo "=== Step 1: Clean, assemble, upload, and deploy ==="
+make clean assemble upload deploy
+
+echo "=== Step 2: Release plugins ==="
+make release-plugins
+
+echo "=== Step 3: Final release ==="
+make release
+
+echo "=== Release process completed successfully ==="