From 1fdc04b3307893f3b66477a78e97723ae98f43d5 Mon Sep 17 00:00:00 2001 From: ralongit Date: Sun, 3 Dec 2023 10:44:42 +0200 Subject: [PATCH] Update release workflow - Deprecate Travis CI - Create GitHub action - Use secrets for creds - Updated signing key --- .github/workflows/mvn-deploy-release.yaml | 40 +++++++++++++++++++++ pom.xml | 11 +++++- release/codesigning.asc.enc | Bin 5280 -> 0 bytes release/settings-security.xml | 3 ++ release/settings.xml | 41 +++++++++++----------- 5 files changed, 73 insertions(+), 22 deletions(-) create mode 100644 .github/workflows/mvn-deploy-release.yaml delete mode 100644 release/codesigning.asc.enc create mode 100644 release/settings-security.xml diff --git a/.github/workflows/mvn-deploy-release.yaml b/.github/workflows/mvn-deploy-release.yaml new file mode 100644 index 0000000..6eaf4c8 --- /dev/null +++ b/.github/workflows/mvn-deploy-release.yaml @@ -0,0 +1,40 @@ +name: Logback Appender Maven CI + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + release: + types: [created] + +jobs: + publish: + runs-on: ubuntu-latest + env: + OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }} + OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }} + GPG_KEY: ${{ secrets.GPG_KEY }} + GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} + MVN_MASTER_PASSWORD: ${{ secrets.MVN_MASTER_PASSWORD }} + steps: + - name: Check out Git repository + uses: actions/checkout@v2 + - name: Install Java and Maven + uses: actions/setup-java@v1 + with: + java-version: 11 + - name: Create settings-security.xml + run: | + echo '' > ~/.m2/settings-security.xml + echo " ${{ secrets.MVN_MASTER_PASSWORD }}" >> ~/.m2/settings-security.xml + echo '' >> ~/.m2/settings-security.xml + - name: Release Maven package + uses: samuelmeuli/action-maven-publish@v1.4.0 + with: + maven_profiles: deploy + gpg_private_key: ${{ secrets.GPG_KEY }} + gpg_passphrase: ${{ secrets.GPG_PASSPHRASE }} + nexus_username: ${{ secrets.OSSRH_USERNAME }} + nexus_password: ${{ secrets.OSSRH_PASSWORD }} + server_id: ossrh-nexus \ No newline at end of file diff --git a/pom.xml b/pom.xml index 5d564ca..0ee1642 100644 --- a/pom.xml +++ b/pom.xml @@ -88,7 +88,16 @@ org.apache.maven.plugins maven-gpg-plugin - 1.5 + 1.6 + + + + --pinentry-mode + loopback + --no-tty + + + sign-artifacts diff --git a/release/codesigning.asc.enc b/release/codesigning.asc.enc deleted file mode 100644 index cd3ace8f249ae19b860d4117e0300615fdb44020..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 5280 zcmV;R6kqF8VQh3|WM5yYJ1PJsdH~|-Lr5stQyUj1nldC_V~nZsA$HFI73(Lq7F}C9 zke5uT8VcTJROjMh-??(%3kVQ4(=Pf)(v^sNWZaV zJ@sYPualy@KP)%bNWAMM5X1+-ME0n*xUw}TEM4kuX3e>T8Q`{6EY<57y(w2M{)F;s z_lP|}pc4u3cH)CIJU|dCMG*a<1t`ilbNSM|MeG1*&1O3tRXIxobKScMd>@-O^W~Oc z6KJ8{5P@s^UogidM+VDUA2D*i!IQ_k1I$m#^X_U2)_j>w(rDFrsQdMs#6~stYWWB$YwZA>tk5354OZ!V6AGsPzYWvcFS-umsf!&Os?um95Uz&E7@ z5U6L044XIQ&B!l0mKg+3URcX{8<$}DFx5F?f|vhZDLz;@69M)r)UhA3{KaBUy8Y71 zb$HAovR|Z2|86e>31g#141w=z7rb)0My-pbwrxmfb(YhG{)^QGLWH$i+@IF?$dSO8J|5LAR$U8{tAvhUu3+2c5Na*1dSSX?^2zK`QpRmCI&lDD` zkgZ#JB{1NdTH%7j9P zxBMh|*t{Cbg`hlff$+Bbi^t+@{@gR|bNZ1H*n#HgZMPk;b?y|#C@?-@E_MblfYR9S zh>R@|nKJp4Q<$1^CVj2kJ(U)6{0`p+csx*L8OmuR)0-uT=ZaxfYp@Wfg(i$wn=oaA zx+hFX;gK+6>SL)!m?4R9|E8b|soQ`=B*d{W<>m*m=!M|OJuz{*xO~GdrHw5Lp^n^v z6@_vv`hj)T@0i;jphgJQ!L%`w-wib!FW~F=6BjYn!?}10H@*Vi0{yBs%w=EZdOAa_ z<7)Zj#8*r8gq#;QClt^Z8#0Q(4%L42UJ6Nxhqs!NBZvs>l==crW&>ml7FZss;b!{g zUcXWY;qg4VtFScyt~Mn*=Zm+5Hd`VtBvH_g6CaxUZ?rN>`m7X!wM)yPf;>4g={lQ3$XLb-&XA5{bk32nS?8XOH(keFeJWkOL#FX;DWeiA&2G%o>V^lvZfNw zHX-B@fH$>-*gIIiQ!3mSwWvX%0cKS>mVHE-83le%Tpa!%lq2myt}S$=&Z@B7N7Wjc zx$+}h2K|CXR2h=WV7jGo4(XI&vUM_2J4|MTT?zyqY*fvTVsxKP z84vWCn}R7T1Imd_s-M$94Z(#SXUm!Cc>5?qWs*vV&Ds;gdUJ=)qE)Vq*m#)lG?G(% zj~6m4eV!_k9)P<!ec`?v1@7PgK(;7F-rc4nU6dvSz>)vQ>gv@N zdNj+15Q;h>k8*}D*u#3^J(Kw3I|;EyZ^kWjH#gHZ5USnaHc~ZvS6Jx%R#(YGc_Yxi z`3B<{B2h{+eM#l;4V?T0(sAB=QV=qt(;vm17h7@D)W)lb2C2^*)F&-D#!w`J_jg@M zqRVYsr%Ev$c}_ORtXZ;pYt+9?RY>3g0+L2xclOs;B2yzlq~YO#hFoA05RX99DT*u5 zhvPd3Ql1sBY@b>QI4R4}eq%nN@jQZ5@GV*)^DTo^&o*S9IcQPszqHw)pK2EaMnstAi7K#^omklhl6cI2ty&*tV zqK1ufdCY+3oZnvSu&(mh7H7FKWf=sMC_-<4H1ZxfCvSWT!6I_*X3)^#q=pP!{okm0 z&9nryRUybp==CU%;7;FX2KUNlzH$VZ{uzU|X-(bw6B=&?P6RPp$^akiH?zUk0~JNF z`%V+ag@^gzLA;q#uo`D)Tqx_Ndid*uTC2>!Bsl>*sJ>Z95vhvl(atQ(gG(!0>Z-Tr zyU1iAzx42|oaTm&8BGG$mIyP;Q}#jrCM)V4DBLec*0uJ|!TEZEda8^7uZ{6G=V`~D zKGjv#*kUrQ82A-%vp2Pj9l2|$Pd}i8_?fiXVw>dUB)Gb~ED?+tJ*WqaEUtg3{I!J| zt%0fDlL>wk6nd9Zu}8r#WYU#3%A>Q>{=b;ZMQEnj>PlIjq;7_3GCD3%%jVnMp`r4= zy|jpf=C&BxYo#r6=vK|ts~<)8S#sQKw`hzSK%-2BA$3y?i) zu8kXeAMIO#J1aLlBHzGN+7$qA+GGlTTghGqRR3PG4dL7xL`(2SKX`B|74t zp65C*dC~eKcBS2Be6x{7-Q}$M9)|>j)ShNaIXBZtizQ(E`)tj8U&LD)iwSs(hN9d2 zJ>C#kO~pH#ww{GiNBvHeEE3wJ^9Ts!nW*e2m1*qmu45<_>fvys=7BHgLd8_=u;5_L zWJJ6OUlcq;wHTyf+b|lYa;thyT~5>ooBJ}C!Jzbnwx=UO(d2{uk0FJQoU6-PEv3=0 zvrUwhgIWg;IrPNpRn$Uam*WqL~BT2BkbrDsWq#~@kg~xL-FD=~1 zxma}W4hxy_&3(+DtW%BEug8pha`oFa(&L{YgqDO(C4ozZvlO?bZx zeu^DPB3IXf2kRMJM32uzGH>P)BT>L4*Q0^6ihunO`m$I%Pw6No`gfj9Qc`So$jj*N zC23%Q6HgdHGTGJ+ejo-eG8`kFYcI4<)yPBfYlJk}j$=cg1xhc~oNNmbaUv#~u#uLC zhbf6~hk`=fWwPzJN8j^Bv7hdE8?eTThZ+iDpO0d~{JM0D|fS!^JS%)n*X6A8ud zkv&d&V`n86i#hHJL=)+F)U?l$o4uv`7;HGFvTm1RIgPwbM?vbOC|-}PW2+JJl+&?l z++E{PYO~>sU}*|m`P4DVlm=jhL_bGq@K&yI zX?T%3GQ&#kx2dsK2$GzBOLlM>G5zu!HfP>{40sIKe_zVv3ktoku{;+LpF8$L`4B2m ztt&SDgoKMC9D18rZGGC7-Z=;}J!VYpBC53sLHP0Kp2z3LYt&G{AE$ ztw8axUQVYZgG_k@`z6i2bZ}e8Tfk$`G&lu^@m7SyW z#217^iZq;lf;;#?0(0$hZ|m8wQ^F6@t37fq+6S{>^Qj_>_A{(O^}QXx3Ro4tfmzJ* zU@Zx4ozZ!E$ZKS}8t|r)QmR_m z4s7In4}&tzl@Ax(DAcVS7fJ}>e~Qwl(o0@GOj1rW2A56&n27f4{e?qjYP%2ZD#R78 zj2~tQv1Se7yP{nUUKb@Lw*ilBX8mA;pjzbNO)K>FN){IzTZT{;OZdt_4qs%{Zt zw=y^4Sa&O7qm`*n9PAst4o70uO=WFD_sWpI?5;b9LhgX#Jf~KJ!gQ@gMuenafyrND z%wt;G#RFcuaQ{l2#&ApWVtvFv%#U)4CCRO07XGh1wS4n`Igh8)mk!84Ypp~G)WXDW zoB(f`)4SIUMKw#^C_7=#oQnL5vtgHEBjvW#M5(lrWD`RrzN|v^tYG^T28xiIQ+_k% z9=@fQ<8oFpiuZoZ0%&Z?4}r%qkZm%A8;dc1aOwE*|6zsUx3_%KrZ}cPj2>Q(C%1iz zxS2Q|wFHTBd|~C<6q2XiPg@Pw2%J(l|N9h0I>4)pVM$behObNo+;qeXxBXDWRgsQ( zP>)t-y|8RHV(5`MeLongH7u1jL&oPkj*(jO4Ta+=%77rP(Z9RHNabv>>|mkvfjb!^D@p&z7s_d5 zdSe!OB>$$?mVG;h1Ti<`E!c0Uj)?wg^mWMBc~DBW{?EP{Uo)-uW9(1efGLO=*!c2F zyKppLjdGOBOG&7VsYSA>|3~{@k>)T#rC6@VN``S7;YayH3NifU*|mt(^t;cB z{&(WhM^*$|i%=mq7}0ix~EIA&9AK>5$-m#?~w5)O5=k%z_TwmHjAh)hUZ^$~?8AEMZop)856IUvG+S%LppZFjg3MH6iu6LnD5YCzmC&!ftdDxuP3{bt&Hz zmjaUkMj={Zq*M9EKXZnauguma zjt65#KuBfNK^HAFJ#iP4$;ve-iR0|Wu<$14Lr^f+^$P`L(R#wq7E`6 zG1YeCt*I!IRz5ryhqsmob;`$+>i{bURuGd#TFJ8z<{EAdog>^imCd#vYZSqBU&q$S zK>F&V@&T77&s#tVB)3aI8H$~31WzjoG<4d!s&$Ox7E3`Xc+fZ@fv`wGZw3PExl#ln zi-Zt_7t7*o;oZj)adSPI$3;Yl@7+s+KRy(gl*|wK;c64w%4+Ye{GC>WiZ`tQ%V239 z>xa78%Fd-7wCvAHH4i`DKz4oxvY9YF8EV|-p=>+1=0gwNNv_+!c&!{ + ${env.MVN_MASTER_PASSWORD } + diff --git a/release/settings.xml b/release/settings.xml index b811627..9f0da13 100644 --- a/release/settings.xml +++ b/release/settings.xml @@ -1,23 +1,22 @@ - - - ossrh-nexus - ${env.OSSRH_USERNAME} - ${env.OSSRH_PASSWORD} - - - - - - ossrh-nexus - - true - - - gpg - ${env.GPG_KEY} - ${env.GPG_PASSPHRASE} - - - + + + ossrh-nexus + ${env.OSSRH_USERNAME} + ${env.OSSRH_PASSWORD} + + + + + ossrh-nexus + + true + + + gpg + ${env.GPG_KEY} + ${env.GPG_PASSPHRASE} + + + \ No newline at end of file