chore(QTDI-1553): migrate from osshr to central

[ozhelezniak-talend]

Requirements

https://qlik-dev.atlassian.net/browse/QTDI-1553

Why this PR is needed?

What does this PR adds (design/code thoughts)?

[Copilot]

Pull Request Overview

Updates the project’s Maven configuration to use Sonatype Central Portal instead of OSSRH, swaps out the Nexus staging plugin for the central-publishing plugin, and aligns Jenkins credentials.

• Replace all OSSRH endpoints and plugin IDs with central.sonatype.com URLs and central-publishing-maven-plugin.
• Add Cloudera public plugin repository and update Jenkins server ID to central.portal.
• Remove explicit release repository in favor of plugin defaults (per inline comment).

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
pom.xml	Switched distributionManagement and repositories to central portal URLs; replaced nexus-staging plugin with central-publishing plugin; added Cloudera public pluginRepository.
.jenkins/settings.xml	Changed server <id> from ossrh to central.portal for Jenkins credentials.

Comments suppressed due to low confidence (3)

pom.xml:139

• [nitpick] This inline comment is vague; consider clarifying which plugin features automatically handle releases and snapshots or remove it if no longer needed.

    <!-- looks like release and snapshot plugins are handled by sonatype plugin from the box -->

.jenkins/settings.xml:8

• [nitpick] The server ID central.portal no longer matches the OSSRH_* environment variable names; consider renaming the env vars or adding documentation so credentials map correctly.

      <id>central.portal</id>

pom.xml:139

• The <repository> section for releases was removed—ensure you explicitly declare a <repository> for releases or verify that central-publishing-maven-plugin will publish releases correctly to avoid deployment failures.

    <!-- looks like release and snapshot plugins are handled by sonatype plugin from the box -->

[undx]

Left question.
Will 👁️ for any other may miss.

[undx]

see releases also I think...

[undx]

cloudera for releases? (see my previous comment).

[ozhelezniak-talend]

Cloudera is to load maven plug-in. The new is placed there

[ozhelezniak-talend]

And I didn't understand this comment.

[undx]

Found some extra references to sonatype.org:

component-runtime/Jenkinsfile

Lines 473 to 474 in 6661911

	repo = ['oss.sonatype.org',
	'https://oss.sonatype.org/content/repositories/snapshots/org/talend/sdk/component/']

component-runtime/sample-parent/documentation-sample/_src/build/Bundles.groovy

Lines 124 to 125 in da88e58

	def snapshotLink = "https://oss.sonatype.org/service/local/artifact/maven/content?r=snapshots&g=org.talend.sdk.component&a=documentation-sample&v=${project.version}&e=zip&c=${it}-distribution"
	def releaseLink = "https://repo.maven.apache.org/maven2/org/talend/sdk/component/documentation-sample/${project.version.replace('-SNAPSHOT', '')}/documentation-sample-${project.version.replace('-SNAPSHOT', '')}-${it}-distribution.zip"

Also in master pom.xml.

Also, did not checked if still mirrored (I think so), check maybe all references to repo.maven.apache.org

component-runtime/component-starter-server/src/main/java/org/talend/sdk/component/starter/server/service/info/ServerInfo.java

Line 154 in da88e58

.target("https://repo.maven.apache.org/maven2/org/talend/sdk/component/component-starter-server/");

[sonar-eks]

Analysis Details

0 Issues

• 0 Bugs
• 0 Vulnerabilities
• 0 Code Smells

Coverage and Duplications

• No coverage information (65.80% Estimated after merge)
• 0.00% Duplicated Code (1.30% Estimated after merge)

Project ID: org.talend.sdk.component:component-runtime

View in SonarQube