Migrated to maven-gpg-plugin 3.2.0

itemis · Mar 15, 2024 · 28a5dd6 · 28a5dd6
1 parent 7cc3365
commit 28a5dd6
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 13 deletions.
diff --git a/.github/workflows/release-workflow.yml b/.github/workflows/release-workflow.yml
@@ -8,24 +8,23 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           distribution: 'temurin'
           java-package: 'jre'
-          java-version: '11'
+          java-version: '21'
           check-latest: true
           server-id: 'ossrh'
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
-          gpg-private-key: ${{ secrets.ITEMIS_OSS_GPG_PRIVATE_KEY }}
-          gpg-passphrase: SIGN_KEY_PASS
           cache: 'maven'
       - name: Build & Deploy
         run: |
-          mvn -U clean deploy -P release
+          mvn -U -B clean deploy -P release
         env:
+          SIGN_KEY: ${{ secrets.ITEMIS_OSS_GPG_PRIVATE_KEY }}
           SIGN_KEY_PASS: ${{ secrets.ITEMIS_OSS_GPG_PRIVATE_KEY_PASSPHRASE }}
           MAVEN_USERNAME: ${{ secrets.ITEMIS_OSS_SONATYPE_USER }}
           MAVEN_PASSWORD: ${{ secrets.ITEMIS_OSS_SONATYPE_PW }}

diff --git a/.github/workflows/snapshot-workflow.yml b/.github/workflows/snapshot-workflow.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-package: 'jre'
-          java-version: '11'
+          java-version: '21'
           check-latest: true
           cache: 'maven'
       - name: Run Maven

diff --git a/pom.xml b/pom.xml
@@ -138,8 +138,6 @@
                                 <tagNameFormat>@{project.version}</tagNameFormat>
                             </configuration>
                         </plugin>
-                        <!-- The keyname & passphrase are configured via
-                        GitHub's actions/setup-java action. -->
                         <plugin>
                             <artifactId>maven-gpg-plugin</artifactId>
                             <executions>
@@ -150,10 +148,9 @@
                                         <goal>sign</goal>
                                     </goals>
                                     <configuration>
-                                        <gpgArguments>
-                                            <arg>--pinentry-mode</arg>
-                                            <arg>loopback</arg>
-                                        </gpgArguments>
+                                        <signer>bc</signer>
+                                        <keyEnvName>SIGN_KEY</keyEnvName>
+                                        <passphraseEnvName>SIGN_KEY_PASS</passphraseEnvName>
                                     </configuration>
                                 </execution>
                             </executions>