chore: sign the released scala nighlies now

Author: hamzaremmal

.github/workflows/release-maven-artifacts.yml

@@ -22,13 +22,19 @@ jobs:
           java-version: 17
           cache: 'sbt'
       - uses: sbt/setup-sbt@v1
+      - name: Import Scala PGP Key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.SCALA_PGP_KEY }}
+          passphrase: ${{ secrets.SCALA_PGP_PASSPHRASE }}
       - name: Publish Artifacts to the Maven Repository
-        run : sbt scala3-bootstrapped-new/publish
+        run : sbt scala3-bootstrapped-new/publishSigned
         env:
           MAVEN_REPOSITORY_USER : ${{ secrets.MAVEN_REPOSITORY_USER }}
           MAVEN_REPOSITORY_TOKEN: ${{ secrets.MAVEN_REPOSITORY_TOKEN }}
           MAVEN_REPOSITORY_HOST : ${{ vars.MAVEN_REPOSITORY_HOST }}
           MAVEN_REPOSITORY_REALM: ${{ vars.MAVEN_REPOSITORY_REALM }}
           MAVEN_REPOSITORY_URL  : ${{ vars.MAVEN_REPOSITORY_URL }}
+          SCALA_PGP_PASSPHRASE  : ${{ vars.SCALA_PGP_PASSPHRASE }}
           NEWNIGHTLY            : ${{ vars.NEWNIGHTLY }}
           NIGHTLYBUILD          : ${{ vars.NIGHTLYBUILD }}

project/Build.scala

@@ -3394,6 +3394,8 @@ object Build {
         // The old build credentials are configured differently
         None
     ).toList,
+    PgpKeys.pgpPassphrase := sys.env.get("SCALA_PGP_PASSPHRASE").map(_.toCharArray()),
+    PgpKeys.useGpgPinentry := true,
     publishConfiguration ~= (_.withOverwrite(true)),
     publishLocalConfiguration ~= (_.withOverwrite(true)),
     projectID ~= {id =>