Fix deploy pipeline configuration

Secret names are wrong; also The "skipDeployment" feature is used so that the
release job just pushes the previously build deploy bundle

Author: atextor

.github/workflows/release-workflow.yml

@@ -42,8 +42,8 @@ jobs:
             exit 1
           fi
 
-  # The Linux build will upload the local Nexus deployment repository
-  # (i.e., what will be deployed to OSSRH/Maven Central)
+  # The Linux build will upload the local Maven Central bundle
+  # (i.e., what will be deployed to Maven Central)
   # and the Linux-specific samm-cli binary to the build artifacts
   build-linux:
     name: Linux build
@@ -63,6 +63,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '21'
+          # The following variables are defined in https://github.com/eclipse-esmf/.eclipsefdn/blob/main/otterdog/eclipse-esmf.jsonnet
           gpg-private-key: ${{ secrets.PGP_KEY }}
           gpg-passphrase: PGP_KEY_PASSWORD
           overwrite-settings: false
@@ -88,7 +89,7 @@ jobs:
         with:
           swap-size-gb: 12
 
-      # The Linux build will prepare a local Nexus staging repository
+      # The Linux build will prepare a Maven Central upload "bundle"
       # that includes all .jars except the CLI jar
       - name: Build and run tests
         run: |
@@ -98,11 +99,17 @@ jobs:
           mvn clean install -DskipTests -Dmaven.javadoc.skip=true
           mvn versions:set -DnewVersion=${{ github.event.inputs.release_version }}
           mvn versions:commit
-          
+
           release_version=${{ github.event.inputs.release_version }}
 
-          # Actual build of core SDK 
-          mvn -B -pl '!org.eclipse.esmf:samm-cli' clean install -Pnative -Dmaven.wagon.httpconnectionManager.ttlSeconds=60
+          # Actual build of core SDK
+          mvn -B -pl '!org.eclipse.esmf:samm-cli' clean deploy -Pnative -Dmaven.wagon.httpconnectionManager.ttlSeconds=60 -Psign
+
+          # Create Maven Central upload bundle
+          pushd target/central-deferred
+          zip -r -9 ../../central-bundle.zip .
+          popd
+
           # Build samm-cli executable jar and run integration tests
           unset JAVA_TOOL_OPTIONS
           mvn -B -pl tools/samm-cli clean verify -Dmaven.wagon.httpconnectionManager.ttlSeconds=60
@@ -136,6 +143,7 @@ jobs:
         with:
           name: linux-artifacts
           path: |
+            central-bundle.zip
             samm-cli-${{ github.event.inputs.release_version }}-linux-x86_64.tar.gz
             samm-cli-${{ github.event.inputs.release_version }}.jar
             samm-cli-${{ github.event.inputs.release_version }}-javadoc.jar
@@ -187,19 +195,19 @@ jobs:
           bundle="samm-bundle-$(date +%s)"
           mkdir ${bundle}
           curl -Lo jre.tar.gz https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.6%2B7/OpenJDK21U-jre_x64_mac_hotspot_21.0.6_7.tar.gz
-          tar -xvf jre.tar.gz 
+          tar -xvf jre.tar.gz
           cp -r ./jdk-21.0.6+7-jre/Contents/Home ./${bundle}/jre
           cp tools/samm-cli/target/samm-cli-${{ github.event.inputs.release_version }}.jar ./${bundle}/
-          
+
           cat <<EOF > ./${bundle}/run.sh
           #!/usr/bin/env bash
-          
+
           HERE=\${BASH_SOURCE%/*}
-          
+
           "\$HERE/jre/bin/java" -jar "\$HERE/samm-cli-${{ github.event.inputs.release_version }}.jar" "\$@"
           EOF
-          chmod +x ./${bundle}/run.sh 
-          
+          chmod +x ./${bundle}/run.sh
+
           curl -Lo warp-packer https://github.com/dgiagio/warp/releases/download/v0.3.0/macos-x64.warp-packer
           chmod +x warp-packer
           ./warp-packer --arch macos-x64 --input_dir ${bundle} --exec run.sh --output samm
@@ -296,11 +304,10 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '21'
-          server-id: ossrh
+          server-id: central
+          # The following variables are defined in https://github.com/eclipse-esmf/.eclipsefdn/blob/main/otterdog/eclipse-esmf.jsonnet
           server-username: CENTRAL_SONATYPE_TOKEN_USERNAME
           server-password: CENTRAL_SONATYPE_TOKEN_PASSWORD
-          gpg-private-key: GPG_PRIVATE_KEY
-          gpg-passphrase: GPG_PASSPHRASE
           overwrite-settings: false
 
       # Required to run the mvn:versions, since enforcer plugin
@@ -412,27 +419,17 @@ jobs:
           curl -X POST https://ci.eclipse.org/esmf/github-webhook/ -H "Content-Type: application/json" -H "X-GitHub-Event: push" -H "X-Hub-Signature: sha1=${SHA1}" -d "${DATA}"
 
       # Full release: Maven Central
-      # The (apparently) only way to retrieve the staging profile id
-      # is the undocumented rc-list-profiles command of the
-      # nexus-staging-maven-plugin:
-      # mvn org.sonatype.plugins:nexus-staging-maven-plugin:1.6.13:rc-list-profiles -DnexusUrl=https://oss.sonatype.org/ -DserverId=ossrh
       - name: Release to Maven Central
         if: ${{ !contains( github.event.inputs.release_version, '-M' ) }}
         run: |
-          mvn -B -pl '!org.eclipse.esmf:samm-cli,!org.eclipse.esmf:documentation' clean deploy -Psign
-#        run: |
-#          mkdir deploy
-#          mv nexus-staging deploy
-#          cd deploy
-#          mvn org.sonatype.plugins:nexus-staging-maven-plugin:1.6.13:deploy-staged-repository \
-#            -DnexusUrl=https://oss.sonatype.org/ \
-#            -DserverId=ossrh \
-#            -DrepositoryDirectory=nexus-staging \
-#            -DstagingProfileId=7e73217781f2e
+          token_header=$(printf "$CENTRAL_USERNAME:$CENTRAL_PASSWORD" | base64)
+          curl --request POST \
+          --header "Authorization: Bearer $token_header" \
+          --form [email protected] \
+          https://central.sonatype.com/api/v1/publisher/upload
         env:
           CENTRAL_USERNAME: ${{ secrets.CENTRAL_SONATYPE_TOKEN_USERNAME }}
           CENTRAL_TOKEN: ${{ secrets.CENTRAL_SONATYPE_TOKEN_PASSWORD }}
-          PGP_KEY_PASSWORD: ${{ secrets.GPG_PRIVATE_KEY }}
 
       # Milestone release: Write settings to deploy to Github repo
       - name: Write settings.xml