Describe the expected release process; include plugins that are needed for the release process

Author: JeanMarc van Leerdam

.gitignore

@@ -5,3 +5,5 @@
 target/
 local_env.sh
 *.iml
+
+.env

.jvmopts

@@ -0,0 +1,2 @@
+--add-opens=java.base/java.util=ALL-UNNAMED
+--add-opens=java.base/java.lang=ALL-UNNAMED

README.md

@@ -96,14 +96,32 @@ Note: to successfully run the `deploy` scripted test, you need to have the Azure
 to a subscription that has a resource group and storage account as specified in the `sbt-test/sbt-azure-functions/deploy/build.sbt` file.
 
 ## Releasing (for plugin maintainers)
-To release a new version:
-* Get a [bintray](https://bintray.com) account and make sure you're a member of the [`code-star`](https://bintray.com/code-star) organization.
-* Set your credentials - you can use `sbt bintrayChangeCredentials`, but when run from the interactive sbt prompt
-  you will not see the requests for username and password. So blindly first type your username, press enter, then
-  paste your API key and press enter again.
-
-    (found a workaround that shows the prompt again: add to build.sbt: `ThisBuild / useSuperShell := false`)
-* reload to make new settings known to sbt
-* Run `sbt release`
-
-Update Feb 2021: we started moving away from Bintray. We will start using sbt-ci-release and release to Maven Central. 
+To release a new version, make sure you have:
+* proper access to the `nl.codestar` namespace on Sonatype.
+* GnuPG (`gpg`) installed and a signing key configured.
+    * We use `sbt-pgp` plugin to sign, which relies on the `gpg` command line tool
+* create a `.env` file in the project root with the following variables:
+  ```
+  PGP_KEYID=<id of the signing key>
+  PGP_PASSPHRASE=<your PGP passphrase>
+  SONATYPE_USER=<user id or token id>
+  SONATYPE_PASSWORD=<password or token>
+
+  ```
+
+Note: The `.env` file needs to be kept out of the git repository (it is `.gitignore`d).
+
+See [Using Sonatype](https://www.scala-sbt.org/1.x/docs/Using-Sonatype.html) in the SBT documentation.
+
+Steps to release SNAPSHOT version (not preferred):
+1. `sbt publishSigned`
+2. `sbt sonaUpload`
+3. Go to https://central.sonatype.com/publishing/deployments and publish the deployment.
+    * or run `sbt sonaRelease` to publish the deployment automatically
+
+Steps to release (preferred):
+1. Tag the current commit with the new version number, e.g. `git tag v0.5.0`
+2. `sbt publishSigned`
+3. `sbt sonaUpload`
+4. Go to https://central.sonatype.com/publishing/deployments and publish the deployment.
+    * or run `sbt sonaRelease` to publish the deployment automatically

build.sbt

@@ -1,8 +1,12 @@
 lazy val commonSettings = Seq(
   organization := "nl.codestar",
   homepage := Some(url("https://github.com/code-star/sbt-azure-functions-plugin")),
-  // version is set by sbt-dynver plugin (included through sbt-ci-assembly)
+  // version is set by sbt-dynver plugin (included through sbt-ci-release)
   description := "SBT Plugin to generate function.json artefacts needed to publish code as an Azure Function",
+  organization := "nl.codestar",
+  organizationName := "Codestar powered by Sopra Steria",
+  organizationHomepage := Some(url("https://codestar.nl")),
+  homepage := Some(url("https://codestar.nl/sbt-azure-functions-plugin")),
   licenses += ("MIT", url("https://opensource.org/licenses/MIT")),
   developers := List(
     Developer(
@@ -11,7 +15,38 @@ lazy val commonSettings = Seq(
       "jean-marc.vanleerdam@soprasteria.com",
       url("https://soprasteria.com")
     )
+  ),
+  scmInfo := Some(
+    ScmInfo(
+      url("https://github.com/code-star/sbt-azure-functions-plugin"),"scm:git@github.com:code-star/sbt-azure-functions-plugin.git")
+  ),
+  credentials ++= Seq(
+    Credentials(
+      "GnuPG Key ID",
+      "gpg",
+      System.getenv("PGP_KEYID"), // key identifier
+      "ignored" // this field is ignored; passwords are supplied by pinentry
+    ),
+    Credentials(
+      "Sonatype Nexus Repository Manager",
+      "oss.sonatype.org",
+      System.getenv("SONATYPE_USER"),
+      System.getenv("SONATYPE_PASSWORD") // Use environment variable for security
+    ),
+    Credentials(
+      "Sonatype Nexus Repository Manager",
+      "central.sonatype.com",
+      System.getenv("SONATYPE_USER"),
+      System.getenv("SONATYPE_PASSWORD") // Use environment variable for security
+    ),
+    Credentials(
+      "central-snapshots",
+      "central.sonatype.com",
+      System.getenv("SONATYPE_USER"),
+      System.getenv("SONATYPE_PASSWORD") // Use environment variable for security
+    )
   )
+
 )
 
 lazy val root = project.in(file("."))
@@ -29,6 +64,12 @@ lazy val plugin = project.in(file("plugin"))
   .settings(
     name := "sbt-azure-functions",
     commonSettings,
+    scalaVersion := "2.12.18",
+    pluginCrossBuild / sbtVersion := {
+      scalaBinaryVersion.value match {
+        case "2.12" => "1.11.4" // set minimum version
+      }
+    },
     scalacOptions ++= Seq(
       "-encoding",
       "UTF8",
@@ -60,3 +101,12 @@ lazy val plugin = project.in(file("plugin"))
 
 // workaround for interactive sessions that do not echo the user input (https://github.com/sbt/sbt-bintray/issues/177)
 ThisBuild / useSuperShell := false
+
+ThisBuild / pomIncludeRepository := { _ => false }
+ThisBuild / publishMavenStyle := true
+
+ThisBuild / publishTo := {
+  val centralSnapshots = "https://central.sonatype.com/repository/maven-snapshots/"
+  if (isSnapshot.value) Some("central-snapshots" at centralSnapshots)
+  else localStaging.value
+}

project/plugins.sbt

@@ -1,3 +1,5 @@
-addSbtPlugin("com.github.sbt" % "sbt-ci-release" % "1.11.1")
-addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.3.1")
 addSbtPlugin("ch.epfl.scala" % "sbt-bloop" % "2.0.13")
+addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.3.1")
+addSbtPlugin("com.github.sbt" % "sbt-ci-release" % "1.11.1")
+addSbtPlugin("com.github.sbt" % "sbt-pgp" % "2.3.1")
+addSbtPlugin("nl.gn0s1s" % "sbt-dotenv" % "3.1.1")