Skip to content

Enable gpg signing #1013

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
HannesWell wants to merge 6 commits into
base: master
Choose a base branch
from
Draft

Enable gpg signing #1013

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
7cda035
[Build] Enabled gpg-signing for snapshot builds again
iils-hwellmann Jun 22, 2024
91523fb
[RelEng] Migrate publishing to new Maven Central Portal
iils-hwellmann Sep 8, 2025
8b01003
[TMP] Test signing on PR builds
iils-hwellmann Jun 22, 2024
93195c2
[FIXUP]
iils-hwellmann Sep 8, 2025
b5edd04
[REMOVE] Lock snapshots: versions:lock-snapshots
iils-hwellmann Sep 8, 2025
877a461
[FIXUP] More. Requires non-snapshot version (use mvn versions:set
iils-hwellmann Sep 8, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/actions/setup-java-for-deployment/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,8 +18,8 @@ runs:
17
distribution: 'temurin'
cache: 'maven' # Cache Maven dependencies between workflow runs
# Properties for deployment to OSSRH:
server-id: ossrh
# Properties for deployment to Maven Central Portal:
server-id: sonatype-central-portal
server-username: MAVEN_USERNAME
server-password: MAVEN_PASSWORD
# Properties for gpg signing:
Expand Down
15 changes: 10 additions & 5 deletions .github/workflows/maven-build-master-and-publish-snapshot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# This workflow will build a Java project with Maven and will publish snapshot versions to the OSSRH Snapshots repository
# This workflow will build a Java project with Maven and will publish snapshot versions to the Central Portal Snapshots repository
# For more information see:
# https://github.com/actions/setup-java/blob/main/docs/advanced-usage.md#Publishing-using-Apache-Maven
# https://docs.github.com/en/actions/publishing-packages/publishing-java-packages-with-maven
Expand All @@ -7,7 +7,7 @@ name: Maven build and publish Master Snapshot

on:
push:
branches: [ master ]
branches: [ master, enable-gpg-signing ]

jobs:
maven-build-master-and-publish-to-maven-central:
Expand All @@ -22,9 +22,14 @@ jobs:
with:
gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}

- run: mvn -f symja_android_library -B -U -P publish-to-maven-central,exact-target-jdk deploy -Dgpg.skip=true
- run: mvn -f symja_android_library -B -U -ntp -e -P publish-to-maven-central,exact-target-jdk deploy
# Deployment of all modules is deferred to the last module by nexus-staging-maven-plugin
env:
MAVEN_USERNAME: ${{ secrets.OSSRH_TOKEN_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN_PASSWORD }}
MAVEN_USERNAME: ${{ secrets.CENTRAL_PORTAL_TOKEN_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.CENTRAL_PORTAL_TOKEN_PASSWORD }}
MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
- uses: actions/upload-artifact@v4
with:
name: Package
path: '**/target/*'

9 changes: 5 additions & 4 deletions .github/workflows/maven-perform-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,11 @@ jobs:
# Perform the usual maven-release-plugin procedure, but prevent the release commits
# and tag from being pushed to the master immediately. They are only pushed after
# the release is performed successfully. This avoids to have the release
# commits on the master in case release publication fails in the last step).
# commits on the master in case release publication fails in the last step.
# All file-system/git-operations are performed on the runnner's clone of this repo

- run: mvn -f symja_android_library -B release:clean release:prepare -DpushChanges=false
- run: mvn -f symja_android_library -B release:clean release:prepare \
-DaltDeploymentRepository=id::njord:template:release-sca

- name: Read release version
run: | # Create environment variables associcated to release version, derived from the release tag
Expand Down Expand Up @@ -64,8 +65,8 @@ jobs:
- run: mvn -f symja_android_library -B release:perform -DlocalCheckout=true
# Deployment of all modules is deferred to the last module by nexus-staging-maven-plugin
env:
MAVEN_USERNAME: ${{ secrets.OSSRH_TOKEN_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN_PASSWORD }}
MAVEN_USERNAME: ${{ secrets.CENTRAL_PORTAL_TOKEN_USERNAME }}
MAVEN_PASSWORD: ${{ secrets.CENTRAL_PORTAL_TOKEN_PASSWORD }}
MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}

- name: Publish release commits and tag to master
Expand Down
83 changes: 45 additions & 38 deletions symja_android_library/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,11 +36,9 @@
</developer>
</developers>
<modules>
<!-- Internal modules (not deployed).
Must not be last to not break
<!-- Internal modules (not deployed). Must not be last to not break
deployment entirely.
See description of 'skipNexusStagingDeployMojo'
in
See description of 'skipNexusStagingDeployMojo' in
https://github.com/sonatype/nexus-maven-plugins/blob/master/staging/maven-plugin/README.md#plugin-flags-->
<!-- https://jitpack.io repository doesn't work anymore -->
<!-- <module>matheclipse-beakerx</module> -->
Expand Down Expand Up @@ -74,12 +72,14 @@
</issueManagement>
<distributionManagement>
<repository>
<id>ossrh</id>
<url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
<id>sonatype-central-portal</id>
<!-- This is only the URL where release artifacts will be available
for download, for upload the Central Portal Upload API service is used. -->
<url>https://repo.maven.apache.org/maven2</url>
</repository>
<snapshotRepository>
<id>ossrh</id>
<url>https://oss.sonatype.org/content/repositories/snapshots</url>
<id>sonatype-central-portal</id>
<url>https://central.sonatype.com/repository/maven-snapshots</url>
</snapshotRepository>
</distributionManagement>

Expand All @@ -95,7 +95,7 @@
</snapshots>
</repository>
<repository>
<id>maven-snapshots</id>
<id>maven-central-snapshots</id>
<url>https://central.sonatype.com/repository/maven-snapshots/</url>
<layout>default</layout>
<releases>
Expand All @@ -114,6 +114,14 @@
<deployment.suppress>false</deployment.suppress> <!-- child modules can
set this true to not be published -->
<guava.minimal.version>32.0</guava.minimal.version>
<njord.version>0.8.3</njord.version>
<njord.releaseUrl>njord:template:release-sca</njord.releaseUrl>
<njord.snapshotUrl>njord:template:snapshot-sca</njord.snapshotUrl>
<!-- See https://github.com/maveniverse/njord/blob/60c02f746f0606aa685e7119f44c0a5b260bd336/publisher/sonatype-cp/src/main/java/eu/maveniverse/maven/njord/publisher/sonatype/cp/SonatypeCentralPortalPublisherConfig.java#L32-->
<njord.publisher.sonatype-cp.publishingType>USER_MANAGED</njord.publisher.sonatype-cp.publishingType>
<!-- See https://github.com/maveniverse/njord/tree/60c02f746f0606aa685e7119f44c0a5b260bd336/publisher/sonatype-cp -->
<njord.publisher.sonatype-cp.releaseRepositoryId>sonatype-central-portal</njord.publisher.sonatype-cp.releaseRepositoryId>
<njord.publisher.sonatype-cp.snapshotRepositoryId>sonatype-central-portal</njord.publisher.sonatype-cp.snapshotRepositoryId>
</properties>
<dependencyManagement>
<dependencies>
Expand Down Expand Up @@ -232,7 +240,7 @@
<dependency>
<groupId>org.apfloat</groupId>
<artifactId>apfloat</artifactId>
<version>1.14.1-SNAPSHOT</version>
<version>1.14.1-20250825.195357-4</version>
</dependency>
<dependency>
<groupId>org.codehaus.janino</groupId>
Expand All @@ -250,34 +258,34 @@
<version>1.1.3</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-core</artifactId>
<version>4.1-SNAPSHOT</version>
</dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-core</artifactId>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-clustering</artifactId>
<version>4.1-SNAPSHOT</version>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-fft</artifactId>
<version>4.1-SNAPSHOT</version>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-fitting</artifactId>
<version>4.1-SNAPSHOT</version>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-ode</artifactId>
<version>4.1-SNAPSHOT</version>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.hipparchus</groupId>
<artifactId>hipparchus-optim</artifactId>
<version>4.1-SNAPSHOT</version>
<version>4.1-20250905.124235-15</version>
</dependency>
<dependency>
<groupId>org.jgrapht</groupId>
Expand Down Expand Up @@ -497,9 +505,9 @@
<tagNameFormat>v@{project.version}</tagNameFormat>
<autoVersionSubmodules>true</autoVersionSubmodules>
<useReleaseProfile>false</useReleaseProfile>
<releaseProfiles>
publish-to-maven-central,exact-target-jdk</releaseProfiles>
<arguments>-Drelease.build=true</arguments>
<releaseProfiles>publish-to-maven-central,exact-target-jdk</releaseProfiles>
<arguments>-Drelease.build=true -DskipTests</arguments>
<pushChanges>false</pushChanges>
</configuration>
</plugin>
<plugin>
Expand Down Expand Up @@ -552,16 +560,23 @@
<version>3.5.1</version>
</plugin>
<plugin>
<groupId>org.sonatype.plugins</groupId>
<artifactId>nexus-staging-maven-plugin</artifactId>
<version>1.7.0</version>
<groupId>eu.maveniverse.maven.plugins</groupId>
<artifactId>njord</artifactId>
<version>${njord.version}</version>
<configuration>
<serverId>ossrh</serverId>
<nexusUrl>https://oss.sonatype.org/</nexusUrl>
<publisher>sonatype-cp</publisher>
<details>true</details>
</configuration>
</plugin>
</plugins>
</pluginManagement>
<extensions>
<extension>
<groupId>eu.maveniverse.maven.njord</groupId>
<artifactId>extension3</artifactId>
<version>${njord.version}</version>
</extension>
</extensions>
<plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
Expand Down Expand Up @@ -695,6 +710,9 @@
</profile>
<profile>
<id>publish-to-maven-central</id>
<properties>
<altDeploymentRepository>id::njord:template:release-sca</altDeploymentRepository>
</properties>
<build>
<plugins>
<plugin>
Expand Down Expand Up @@ -738,17 +756,6 @@
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.sonatype.plugins</groupId>
<artifactId>nexus-staging-maven-plugin</artifactId>
<extensions>true</extensions>
<configuration>
<skipNexusStagingDeployMojo>${deployment.suppress}</skipNexusStagingDeployMojo>
<!-- Documentation:
https://github.com/sonatype/nexus-maven-plugins/blob/master/staging/maven-plugin/README.md-->
<autoReleaseAfterClose>false</autoReleaseAfterClose>
</configuration>
</plugin>
</plugins>
</build>
</profile>
Expand Down
Loading