fix(android): fail the release when a central deployment does not validate

[andiwand]

publishToMavenCentral uploads the bundle and exits without waiting:

Uploaded bundle to Central Portal as USER_MANAGED, deployment id: 112cd9a1-...
Skipping deployment validation!
BUILD SUCCESSFUL in 10s

Exit 0 whatever the portal then makes of it. A release that uploaded something central rejects looks exactly like one that worked — every android test publish during the maven central bring-up had to be checked by hand in the portal UI.

The maven jar never had this problem: the sonatype plugin blocks and logs has been validated, so maven.yml fails loudly. Only android.yml was silent.

Why not just ask the plugin

publishToMavenCentral(false, DeploymentValidation.VALIDATED) looks like the fix and does nothing. The plugin only wires its validation task in when automaticRelease is true:

if (task.name.endsWith("ToMavenCentralRepository")) {
    task.dependsOn(prepareTask)
    if (automaticRelease)                    // <- the guard
        task.dependsOn(enableAutomaticTask)  // <- carries the DeploymentValidation
}

That was the first version of this PR, caught in review and then confirmed on a real publish — the log above is from that run, with the enum set.

Turning automaticRelease on would validate, but it also releases the deployment. Central never forgets a version, so pressing that button stays a human's job; that was the point of autoPublish = false and it does not change here.

So the workflow polls

.github/scripts/await-central-validation.sh reads the deployment id out of the gradle log and polls /api/v1/publisher/status until the portal reports VALIDATED, failing the job on FAILED (with the portal's own error text) or on a 10 minute ceiling.

The publish step also gains shell: bash, for the pipefail that Actions' default bash -e does not set — otherwise tee's exit code would hide a failing gradle, which is the same class of silent success this PR is about.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d3df0cfe61

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".