Switch to nmcp Gradle plugin for publishing to Maven Central (#5648)

Author: marcphilipp

.github/workflows/main.yml

@@ -99,8 +99,9 @@ jobs:
       with:
         encryptionKey: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
         arguments: >-
-          publishAllPublicationsToMavenCentralSnapshotsRepository -x check
+          publishAggregationToCentralSnapshots
           prepareGitHubAttestation
+          -x check
     - name: Generate build provenance attestations
       uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
       with:

.github/workflows/release.yml

@@ -148,11 +148,9 @@ jobs:
         env:
           ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
           ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
-          JRELEASER_MAVENCENTRAL_STAGE: PUBLISH
-          JRELEASER_MAVENCENTRAL_DEPLOYMENT_ID: ${{ inputs.deploymentId }}
         with:
           encryptionKey: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
-          arguments: jreleaserDeploy
+          arguments: nmcpPublishDeployment -PnmcpDeploymentId=${{ inputs.deploymentId }}
 
   publish_documentation:
     name: Publish documentation

RELEASING.md

@@ -7,7 +7,7 @@
 - [ ] Change release date in Release Notes
 - [ ] Change release date in `README.MD`
 - [ ] Commit with message "Release ${VERSION}"
-- [ ] Execute `./gradlew --no-build-cache --no-configuration-cache clean build jreleaserDeploy`
+- [ ] Execute `./gradlew --no-build-cache --no-configuration-cache clean build publishAggregationToCentralPortal`
 - [ ] Tag current commit: `git tag -s -m ${VERSION} r${VERSION}`
 - [ ] Change `version` in `gradle.properties` on release branch to new development versions and commit with message "Back to snapshots for further development" or similar
 - [ ] Push release branch and tag to GitHub: `git push --set-upstream --follow-tags origin HEAD`

build.gradle.kts

@@ -5,7 +5,6 @@ plugins {
 	id("junitbuild.build-metadata")
 	id("junitbuild.checkstyle-nohttp")
 	id("junitbuild.jacoco-aggregation-conventions")
-	id("junitbuild.maven-central-publishing")
 	id("junitbuild.temp-maven-repo")
 }
 

gradle/libs.versions.toml

@@ -99,9 +99,9 @@ download = { id = "de.undercouch.download", version = "5.7.0" }
 errorProne = { id = "net.ltgt.errorprone", version = "5.1.0" }
 foojayResolver = { id = "org.gradle.toolchains.foojay-resolver", version = "1.0.0" }
 jmh = { id = "me.champeau.jmh", version = "0.7.3" }
-jreleaser = { id = "org.jreleaser", version = "1.23.0" }
 # check if workaround in gradle.properties can be removed when updating
 kotlin = { id = "org.jetbrains.kotlin.jvm", version = "2.3.21" }
+nmcp-settings = { id = "com.gradleup.nmcp.settings", version = "1.5.0" }
 node = { id = "com.github.node-gradle.node", version = "7.1.0" }
 nullaway = { id = "net.ltgt.nullaway", version = "3.0.0" }
 plantuml = { id = "io.freefair.plantuml", version = "9.5.0" }

gradle/plugins/publishing/build.gradle.kts

@@ -6,40 +6,5 @@ plugins {
 
 dependencies {
 	implementation("junitbuild.base:dsl-extensions")
-	implementation(libs.plugins.jreleaser.markerCoordinates)
-	constraints {
-		implementation("org.eclipse.jgit:org.eclipse.jgit") {
-			version {
-				require("6.10.1.202505221210-r")
-			}
-			because("Workaround for CVE-2025-4949")
-		}
-		implementation("org.apache.tika:tika-core") {
-			version {
-				require("3.2.2")
-			}
-			because("Workaround for CVE-2025-66516")
-		}
-		implementation("com.fasterxml.jackson.core:jackson-core") {
-			version {
-				require("2.21.1")
-			}
-			because("Workaround for GHSA-72hv-8253-57qq")
-		}
-		implementation("org.codehaus.plexus:plexus-utils") {
-			version {
-				require("3.6.1")
-			}
-			because("Workaround for CVE-2025-67030")
-		}
-		sequenceOf("bcpkix-jdk18on", "bcutil-jdk18on", "bcprov-jdk18on", "bcpg-jdk18on")
-			.forEach { artifactId ->
-				implementation("org.bouncycastle:$artifactId") {
-					version {
-						require("1.84")
-					}
-					because("Workaround for CVE-2026-3505")
-				}
-			}
-	}
+	implementation(libs.plugins.nmcp.settings.markerCoordinates)
 }

gradle/plugins/publishing/src/main/kotlin/junitbuild.maven-central-publishing.gradle.kts

@@ -0,0 +1,16 @@
+import kotlin.time.Duration.Companion.minutes
+import kotlin.time.toJavaDuration
+
+plugins {
+	id("com.gradleup.nmcp.settings")
+}
+
+nmcpSettings {
+	centralPortal {
+		username = providers.gradleProperty("mavenCentralUsername")
+		password = providers.gradleProperty("mavenCentralPassword")
+		publishingType = "USER_MANAGED"
+		validationTimeout = 10.minutes.toJavaDuration()
+		publishingTimeout = 30.minutes.toJavaDuration()
+	}
+}

gradle/plugins/publishing/src/main/kotlin/junitbuild.maven-central-publishing.settings.gradle.kts

@@ -9,6 +9,7 @@ pluginManagement {
 
 plugins {
 	id("junitbuild.build-parameters")
+	id("junitbuild.maven-central-publishing")
 	id("junitbuild.settings-conventions")
 }