fix: support new Maven central publishing method (#1667)

* fix: support new Maven central publishing method

Maven Central is deprecating its old Nexus 2 OSSRH endpoint, replacing
it with a new plugin and protocol, and a compatibility endpoint.

I just want to migrate to the new publishing mode
-------------------------------------------------

To migrate, do the following:

* Configure `MAVEN_SERVER_ID=central-ossrh`,
* Log in to <https://central.sonatype.com/>
* Generate a new username and password on the new publisher using the **Generate User Token** feature.
* Configure `MAVEN_STAGING_PROFILE_ID` with your package namespace (register it first if necessary)

I'm going to review this PR
---------------------------

Because the new plugin doesn't support our 2-stage publishing method
yet, we are using the compatibility endpoint. The compatibility endpoint
works mostly with the `nexus-staging-maven-plugin` for uploading jars,
but the "release" command doesn't work because of a protocol
incompatibility. So instead, we are using a new custom HTTP request for
the very final "release" command, which is a slightly different version
of what the Nexus plugin sends, but *is* accepted by the endpoint.

Because the old script was in bash and hard to understand and modify,
I've rewritten it to TypeScript with zx, to at least get better type
checking and parameter modeling.

Also described the various parameters better in the README.

* Update README.md

Co-authored-by: Momo Kornher <[email protected]>

* chore: self mutation

Signed-off-by: github-actions <[email protected]>

* chore: self mutation

Signed-off-by: github-actions <[email protected]>

* Bit o' clarification

* Update README.md

* Better way of passing the same vars

---------

Signed-off-by: github-actions <[email protected]>
Co-authored-by: Momo Kornher <[email protected]>
Co-authored-by: github-actions <[email protected]>

Author: 3 people

.eslintrc.json

@@ -16,7 +16,7 @@ const project = new cdklabs.CdklabsTypeScriptProject({
     'ts-node',
     '@aws-sdk/client-sts',
     '@types/glob',
-    '@types/node@^14.17.0',
+    '@types/node@^18.17.0',
     '@types/yargs@^17',
     'cdklabs-projen-project-types',
   ],
@@ -27,12 +27,16 @@ const project = new cdklabs.CdklabsTypeScriptProject({
     '@aws-sdk/types',
     '[email protected]', // Can't use a newer version of glob, it adds a CLI that depends on 'jackspeak' which has crazy dependencies
     'yargs@^17',
+    'zx',
     'p-queue@6', // Last non-ESM version
   ],
   enablePRAutoMerge: true,
   setNodeEngineVersion: false,
 });
 
+// Necessary to work around a typing issue in transitive dependency lru-cache@10 now that we've moved to a modern TS
+project.package.addPackageResolutions('lru-cache@^11');
+
 // we can't use 9.x because it doesn't work with node 10.
 const fsExtraVersion = '^8.0.0';
 

.github/workflows/pull-request-lint.yml

@@ -0,0 +1,33 @@
+# How to work on this repository
+
+## Testing Maven publishing
+
+- Create a Sonatype account at <https://central.sonatype.com/account>. You can use GitHub to sign in.
+- Generate a user token, note the username and password.
+- Generate an empty project and give it a jsii config. Example:
+
+```
+{
+  "jsii": {
+    "versionFormat": "full",
+    "targets": {
+      "java": {
+        "package": "test.test",
+        "maven": {
+          "groupId": "test.test",
+          "artifactId": "test"
+        }
+      }
+    },
+    "outdir": "dist"
+  },
+}
+```
+
+Follow the instructions in the README for creating and exporting a GPG key.
+
+Then run the following command:
+
+```
+env MAVEN_GPG_PRIVATE_KEY_FILE=$PWD/mykey.priv MAVEN_GPG_PRIVATE_KEY_PASSPHRASE=mypassphrase MAVEN_STAGING_PROFILE_ID=com.sonatype.software MAVEN_SERVER_ID=central-ossrh MAVEN_USERNAME=**** MAVEN_PASSWORD=**** /path/to/publib/bin/publib-maven
+```