Update GitHubActions release job (#3053)

Author: pivovarit

.github/workflows/release.yml

@@ -3,9 +3,12 @@ on:
   workflow_dispatch:
     inputs:
       release-tag:
-        description: 'Version to release'
+        description: 'Tag to release (must start with "v", e.g., v1.2.3)'
         required: true
 
+permissions:
+  contents: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -20,24 +23,36 @@ jobs:
         with:
           ref: ${{ github.event.inputs.release-tag }}
 
+      - name: Validate release tag format
+        run: |
+          TAG="${{ github.event.inputs.release-tag }}"
+          
+          if [[ ! "$TAG" =~ ^v[0-9]+(\.[0-9]+)*(-[a-zA-Z0-9]+)?$ ]]; then
+            echo "❌ Invalid tag format: '${{ github.event.inputs.release-tag }}'"
+            echo "✅ Tag must start with 'v' and follow semantic versioning (e.g., v1.0.0 or v1.2.3-RC1)"
+            exit 1
+          fi
+          
+          if ! git show-ref --tags --verify --quiet "refs/tags/${TAG}"; then
+            echo "❌ Tag '$TAG' does not exist in the repository"
+            exit 1
+          fi
+
       - name: Setup JDK
         uses: actions/setup-java@v4
         with:
-          distribution: 'oracle'
-          java-version: ${{ matrix.java }}
-          architecture: ${{ matrix.architecture }}
+          distribution: 'temurin'
+          java-version: '21'
           cache: 'maven'
-          server-id: oss.sonatype.org
-          server-username: MAVEN_USERNAME
-          server-password: MAVEN_PASSWORD
+          server-id: central
+          server-username: CENTRAL_USERNAME
+          server-password: CENTRAL_PASSWORD
           gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
-          gpg-passphrase: MAVEN_GPG_PASSPHRASE
 
-
-      - name: Release with Maven
-        run: mvn -B --no-transfer-progress -Psonatype-oss-release -Prelease-sign-artifacts -DskipTests=true deploy
+      - name: Release
+        run: mvn -B --no-transfer-progress -Pmaven-central-release -DskipTests=true deploy
         env:
-          MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-          MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+          CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
+          CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
           MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
-          MAVEN_OPTS: "--add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED"
+