Merge pull request #34 from scanoss/chore/migrate-workflow-to-mvn-central

Chore/migrate workflow to mvn central

Author: ortizjeronimo

.github/workflows/publish.yml

@@ -34,14 +34,15 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Java
-        uses: actions/setup-java@v1.4.4
+        uses: actions/setup-java@v4
         with:
+          distribution: temurin
           java-version: 11
-          server-id: ossrh
-          server-username: MAVEN_USERNAME
-          server-password: MAVEN_PASSWORD
+          server-id: central
+          server-username: ${{ secrets.OSSRH_USER_TOKEN }}
+          server-password: ${{ secrets.OSSRH_PWD_TOKEN }}
           gpg-private-key: ${{ secrets.GPG_SIGNING_KEY }}
-          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: ${{ secrets.GPG_PWD }}
 
       - name: Package
         run: |
@@ -51,10 +52,6 @@ jobs:
         if: github.ref_type == 'tag' && startsWith(github.ref_name, 'v')
         run: |
           mvn --no-transfer-progress --batch-mode deploy
-        env:
-          MAVEN_USERNAME: ${{ secrets.OSSRH_USER_TOKEN }}
-          MAVEN_PASSWORD: ${{ secrets.OSSRH_PWD_TOKEN }}
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PWD }}
 
       - name: Cache Jars
         uses: actions/upload-artifact@v4

pom.xml

@@ -43,19 +43,6 @@
         <exec.mainClass>com.scanoss.cli.CommandLine</exec.mainClass>
     </properties>
 
-    <distributionManagement>
-        <snapshotRepository>
-            <id>ossrh</id>
-            <name>Maven Central Snapshot Repo</name>
-            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-        <repository>
-            <id>ossrh</id>
-            <name>Maven Central Staging Repo</name>
-            <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-        </repository>
-    </distributionManagement>
-
     <dependencies>
         <!-- Core compile dependencies -->
         <dependency>
@@ -248,6 +235,7 @@
                             <goal>sign</goal>
                         </goals>
                         <configuration>
+                            <passphraseServerId>gpg.passphrase</passphraseServerId>
                             <!-- Prevent gpg from using pinentry programs -->
                             <gpgArguments>
                                 <arg>--pinentry-mode</arg>
@@ -258,14 +246,14 @@
                 </executions>
             </plugin>
             <plugin>
-                <groupId>org.sonatype.plugins</groupId>
-                <artifactId>nexus-staging-maven-plugin</artifactId>
-                <version>1.6.7</version>
+                <groupId>org.sonatype.central</groupId>
+                <artifactId>central-publishing-maven-plugin</artifactId>
+                <version>0.9.0</version>
                 <extensions>true</extensions>
                 <configuration>
-                    <serverId>ossrh</serverId>
-                    <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                    <autoReleaseAfterClose>true</autoReleaseAfterClose>
+                    <publishingServerId>central</publishingServerId>
+                    <autoPublish>true</autoPublish>
+                    <waitUntil>published</waitUntil>
                 </configuration>
             </plugin>
         </plugins>

settings.xml

@@ -1,7 +1,7 @@
 <settings>
     <servers>
         <server>
-            <id>ossrh</id>
+            <id>central</id>
             <username>${env.OSSRH_USER_TOKEN}</username>
             <password>${env.OSSRH_PWD_TOKEN}</password>
         </server>