Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Nov 17, 2025

Description

Adds Maven Central server authentication and GPG signing configuration to the setup-java step in .github/workflows/release.yml. Without these parameters, deployments to Maven Central cannot authenticate or sign artifacts.

Resolves #(issue)

Changes

Added five configuration parameters to the 'Set up JDK 25' step:

  • server-id: central - Maven Central repository identifier
  • server-username: MAVEN_USERNAME - Maven authentication username from environment
  • server-password: MAVEN_PASSWORD - Maven authentication password from environment
  • gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} - GPG private key from secrets
  • gpg-passphrase: MAVEN_GPG_PASSPHRASE - GPG passphrase from environment

Configuration mirrors existing pattern in maven-publish.yml for consistency.

Checklist:

  • Public methods are documented
  • Public methods are tested
  • New and existing tests pass when run locally
  • There are no new warnings or errors
Original prompt

This section details on the original issue you should resolve

<issue_title>[Enhancement]: Add server and GPG configuration options to setup-java in release workflow</issue_title>
<issue_description>### What

Add the following configuration parameters to the 'Set up JDK 25' 'setup-java' step in .github/workflows/release.yml:

  • server-id: central
  • server-username: MAVEN_USERNAME
  • server-password: MAVEN_PASSWORD
  • gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
  • gpg-passphrase: MAVEN_GPG_PASSPHRASE

These should be added to ensure proper authentication and signing of artifacts when deploying to Maven Central.

Why

This enhancement ensures that the build and release workflow correctly authenticates and signs releases for Maven Central. Without these parameters, deployment can fail or be insecure. Including the required server and GPG configuration keys aligns with recommended best practices for publishing Java artifacts.

Notes

Reference workflow file: .github/workflows/release.yml.
Suggested location: 'Set up JDK 25' (setup-java) step.
No other changes anticipated unless new deployment requirements arise.</issue_description>

Comments on the Issue (you are @copilot in this section)


✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: thomasturrell <1552612+thomasturrell@users.noreply.github.com>
Copilot AI changed the title [WIP] Add server and GPG configuration options to setup-java Add server and GPG configuration to setup-java in release workflow Nov 17, 2025
Copilot AI requested a review from thomasturrell November 17, 2025 16:52
@thomasturrell thomasturrell marked this pull request as ready for review November 17, 2025 16:53
@sonarqubecloud
Copy link

@thomasturrell thomasturrell merged commit 74a1128 into main Nov 17, 2025
5 checks passed
@thomasturrell thomasturrell deleted the copilot/add-server-gpg-config-options branch November 17, 2025 16:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Enhancement]: Add server and GPG configuration options to setup-java in release workflow

2 participants