Skip to content

Conversation

@parthban-db
Copy link
Contributor

@parthban-db parthban-db commented Jul 17, 2025

What changes are proposed in this pull request?

This fixes three things in the release workflow:

  • It fixes how we pass the secrets to setup-java. Previously, the secret was passed in the format of {env.Secret}.
  • Added a block in the pom file that signs the binary.
  • Added the name of the JAVA Library in the pom file.

How is this tested?

Manually tested.

NO_CHANGELOG=true

@github-actions
Copy link

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/sdk-java

Inputs:

  • PR number: 489
  • Commit SHA: cb0b2fdb98a81f3723568c567bb8fa5133ccaa5f

Checks will be approved automatically on success.

server-password: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
server-username: MAVEN_CENTRAL_USERNAME
server-password: MAVEN_CENTRAL_PASSWORD
gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the issue with the old way?
Why it does not apply to the private key?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just changed this to the old behavior that we changed here. I actually can't figure out where this key is exactly used.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The issue with the current behaviour is that the secret is passed in the format of {env.Secret}. Which corrupts the secret.

- name: Run Release Dry-Run (Verify)
if: "!startsWith(github.ref, 'refs/tags/')"
run: mvn -Prelease -DskipTests=true --batch-mode verify
env:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No private key needed here?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ditto reason.
I just changed this to the old behavior that we changed here. I actually can't figure out where this key is exactly used.

@parthban-db parthban-db added this pull request to the merge queue Jul 18, 2025
Merged via the queue into main with commit 72a7392 Jul 18, 2025
16 checks passed
@parthban-db parthban-db deleted the parthban-db/fix-release-workflow branch July 18, 2025 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants