You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/release.md
+4-10Lines changed: 4 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ Here we describe all the ceremonial stuff necessary to publish a Java library to
4
4
5
5
## How to Perform a Release
6
6
7
-
The whole release process is automated by a [GitHub action workflow](https://github.com/secureCodeBox/defectdojo-client-java/actions) which utilizes the [Maven release plugin](https://maven.apache.org/maven-release/maven-release-plugin/). Since we need the possibility to set custom versions (e.g. 2.0.0-beta) we can not use a simple one-push-button solution. Instead, we utilize en event triggered workflow to achieve this. The release process is as following:
7
+
The whole release process is automated by a [GitHub action workflow](https://github.com/secureCodeBox/defectdojo-client-java/actions) which utilizes the [Maven Plugin](https://central.sonatype.org/publish/publish-portal-maven/). Since we need the possibility to set custom versions (e.g. 2.0.0-beta) we can not use a simple one-push-button solution. Instead, we utilize en event triggered workflow to achieve this. The release process is as following:
8
8
9
9
First go to the "Actions" tab and select the "Publish Release" workflow:
10
10
@@ -28,7 +28,7 @@ Typically, a release by Maven simply means:
28
28
29
29
- Remove the "-SNAPSHOT" qualifier from the version in the `pom.xml`. E.g. "1.0.0-SNAPSHOT" will become "1.0.0".
30
30
- Build everything, make a commit with this version and tag this version.
31
-
- Upload the resulting artifacts to [Sonatype Nexus](https://oss.sonatype.org/) and stage them.
31
+
- Upload the resulting artifacts to [Maven Central](https://central.sonatype.com/) and stage them.
32
32
- Increment to next development version in `pom.xml`. In this example "1.0.1-SNAPSHOT".
33
33
- Build everything and make a commit.
34
34
@@ -39,15 +39,9 @@ In the case you want to publish a custom release, e.g. a "1.0.2-beta", it is nec
39
39
40
40

41
41
42
-
### Additional Information About the Release Process
43
-
44
-
After the first release a [bot created the Maven Central sync][ossrh-jira-issue]:
45
-
46
-
> Central sync is activated for io.securecodebox. After you successfully release, your component will be available to the public on Central https://repo1.maven.org/maven2/, typically within 30 minutes, though updates to https://search.maven.org can take up to four hours.
47
-
48
42
## Credentials
49
43
50
-
Publishing to Maven Central requires authentication in the form of username and password or user token (as username and password). We use [user tokens][user-token] for authentication, which are stored in our password manager.
44
+
Publishing to Maven Central requires authentication in the form of username and password or user token (as username and password). We use [user tokens](https://central.sonatype.org/publish/generate-portal-token/) for authentication, which are stored in our password manager.
51
45
52
46
### Local (on device)
53
47
@@ -139,7 +133,7 @@ gpg> expire
139
133
```shell
140
134
gpg> save
141
135
```
142
-
6. Update the private key in out password manager and GitHub Secrets
136
+
6. Update the private key in our password manager and GitHub Secrets
0 commit comments