Make sure sources are signed on packaging

By declaring the source plugin before the GPG plugin,
order matters...

Author: acogoluegnes

pom.xml

@@ -451,31 +451,31 @@
 
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-gpg-plugin</artifactId>
-        <version>${maven.gpg.plugin.version}</version>
+        <artifactId>maven-source-plugin</artifactId>
+        <version>${maven-source-plugin.version}</version>
         <executions>
           <execution>
-            <id>sign-artifacts</id>
-            <phase>package</phase>
             <goals>
-              <goal>sign</goal>
+              <goal>jar</goal>
             </goals>
-            <configuration>
-              <keyname>${gpg.keyname}</keyname>
-            </configuration>
           </execution>
         </executions>
       </plugin>
 
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-source-plugin</artifactId>
-        <version>${maven-source-plugin.version}</version>
+        <artifactId>maven-gpg-plugin</artifactId>
+        <version>${maven.gpg.plugin.version}</version>
         <executions>
           <execution>
+            <id>sign-artifacts</id>
+            <phase>package</phase>
             <goals>
-              <goal>jar</goal>
+              <goal>sign</goal>
             </goals>
+            <configuration>
+              <keyname>${gpg.keyname}</keyname>
+            </configuration>
           </execution>
         </executions>
       </plugin>