fix: CD to Maven Central (#3)

* Configuring key and passphrase via settings.xml
* Verify GPG Signing
* Adding developers info
* Ignoring secrets and env variables for act

Author: stigi

.changeset/twenty-donuts-dance.md

@@ -0,0 +1,5 @@
+---
+"magicbell-java-client": patch
+---
+
+Fixes CD to Maven Central

.github/workflows/publish.yml

@@ -4,12 +4,12 @@ on:
   release:
     types: [created]
   workflow_dispatch:
-  
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout code  
+      - name: Checkout code
         uses: actions/checkout@v4
 
       - name: Install gpg secret key
@@ -19,12 +19,25 @@ jobs:
       - name: Set up Maven Central Repository
         uses: actions/setup-java@v4
         with:
-          java-version: '8'
-          distribution: 'temurin'
+          java-version: "8"
+          distribution: "temurin"
           server-id: central
           server-username: MAVEN_USERNAME
           server-password: MAVEN_PASSWORD
-          
+          gpg-private-key: ${{ secrets.MAVEN_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+
+      - name: Verify GPG signing works
+        run: |
+          mvn \
+          --no-transfer-progress \
+          -Dgpg.keyname=${{ secrets.MAVEN_KEY_ID }} \
+          verify gpg:sign
+        env:
+          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_KEY_PASSWORD }}
+
       - name: Publish package
         run: |
           mvn \
@@ -35,4 +48,4 @@ jobs:
         env:
           MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_KEY_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_KEY_PASSWORD }}

.gitignore

@@ -2,4 +2,8 @@
 node_modules/
 target
 
-docs-dist
+docs-dist
+
+# act
+.env
+.secrets

liblab.config.json

@@ -27,6 +27,12 @@
     "java": {
       "groupId": "com.magicbell.client",
       "artifactId": "magicbell-java-client",
+      "developers": [{
+        "name": "Ullrich Schäfer",
+        "email": "ullrich@magicbell.io",
+        "organization": "MagicBell",
+        "organizationUrl": "https://www.magicbell.com"
+      }],
       "githubRepoName": "magicbell-java-client",
       "ignoreFiles": [],
       "includeKotlinSnippets": true,

pom.xml

@@ -22,6 +22,16 @@
         <url>https://github.com/magicbell/magicbell-java-client</url>
     </scm>
 
+    <!-- See https://central.sonatype.org/publish/requirements/#developer-information -->
+    <developers>
+        <developer>
+            <name>Ullrich Schäfer</name>
+            <email>ullrich@magicbell.io</email>
+            <organization>MagicBell</organization>
+            <organizationUrl>https://www.magicbell.com</organizationUrl>
+        </developer>
+    </developers>
+
     <licenses>
         <license>
             <name>MIT</name>