Merge pull request #219 from secure-software-engineering/ci/snapshotrelease

ci snapshot release

Author: swissiety

.github/workflows/approve_dependabotifications.yml

@@ -22,4 +22,4 @@ jobs:
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GH_TOKEN: ${{secrets.PAT_AUTO_MERGE}}

.github/workflows/deploy.yml

@@ -9,28 +9,24 @@ env:
 jobs:
   deployment:
     runs-on: ubuntu-latest
+    name: Deploy to Maven
     environment: Deploy
     steps:
       - name: Checkout source code
         uses: actions/checkout@v4
-      # Sets up Java version
-      - name: Set up Java
-        uses: actions/setup-java@v4
+
+      - name: Deploy version
+        uses: secure-software-engineering/actions/deployment/maven-deployment@maven-central-deploy
         with:
-          distribution: adopt
-          java-package: jdk
+          java-distribution: adopt
           java-version: 11
-          server-id: ossrh # must match the serverId configured for the nexus-staging-maven-plugin
-          server-username: OSSRH_USERNAME # Env var that holds your OSSRH user name
-          server-password: OSSRH_PASSWORD # Env var that holds your OSSRH user pw
-          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }} # Substituted with the value stored in the referenced secret
-          gpg-passphrase: SIGN_KEY_PASS # Env var that holds the key's passphrase
-      - name: Deploy Boomerang
-        run: mvn -B -U clean deploy -Pdeployment -DskipTests
-        env:
-          SIGN_KEY_PASS: ${{ secrets.GPG_PRIVATE_KEY_PASSPHRASE }}
-          OSSRH_USERNAME: ${{ secrets.SONATYPE_USER }}
-          OSSRH_PASSWORD: ${{ secrets.SONATYPE_PW }}
+          server-id: central
+          server-username: ${{ secrets.MAVEN_USERNAME }}
+          server-password: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: ${{ secrets.GPG_PRIVATE_KEY_PASSPHRASE }}
+          mvn-cli-args: '-DskipTests -Pdeployment'
+          deploy-mode: release
 
   snapshot-version:
     runs-on: ubuntu-latest

pom.xml

@@ -363,9 +363,9 @@
                         <version>0.8.0</version>
                         <extensions>true</extensions>
                         <configuration>
+                            <deploymentName>${project.artifactId} ${project.version}</deploymentName>
                             <!-- Same id as in the deployment workflow -->
                             <publishingServerId>central</publishingServerId>
-                            <centralSnapshotsUrl>https://s01.oss.sonatype.org/content/repositories/snapshots/</centralSnapshotsUrl>
                             <waitUntil>published</waitUntil>
                             <autoPublish>true</autoPublish>
                         </configuration>