From f2b87607d140f55e7f4c877f919b21505f222581 Mon Sep 17 00:00:00 2001
From: Matteo Merli <mmerli@apache.org>
Date: Tue, 30 Jan 2024 16:43:35 -0800
Subject: [PATCH] Fixed publishing to Maven Central

---
 .../workflows/ci-maven-publish-release.yaml   |  2 +-
 etc/settings.xml                              | 39 +++++++++++++++++++
 pom.xml                                       | 38 ++++++------------
 3 files changed, 52 insertions(+), 27 deletions(-)
 create mode 100644 etc/settings.xml

diff --git a/.github/workflows/ci-maven-publish-release.yaml b/.github/workflows/ci-maven-publish-release.yaml
index df530ba2..f43ceb4f 100644
--- a/.github/workflows/ci-maven-publish-release.yaml
+++ b/.github/workflows/ci-maven-publish-release.yaml
@@ -47,7 +47,7 @@ jobs:
           name: test-results
           path: test-results.zip
       - name: Publish to the Maven Central Repository
-        run: mvn --batch-mode -Prelease -DskipTests deploy
+        run: mvn --batch-mode -s etc/settings.xml -Prelease -DskipTests deploy
         env:
           MAVEN_USERNAME: ${{ secrets.SONATYPE_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
diff --git a/etc/settings.xml b/etc/settings.xml
new file mode 100644
index 00000000..5e9d4a56
--- /dev/null
+++ b/etc/settings.xml
@@ -0,0 +1,39 @@
+<!--
+
+    Copyright © 2022-2024 StreamNative Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+
+-->
+<settings>
+  <servers>
+    <server>
+      <id>central</id>
+      <username>${env.SONATYPE_USERNAME}</username>
+      <password>${env.SONATYPE_PASSWORD}</password>
+    </server>
+  </servers>
+
+  <profiles>
+    <profile>
+      <id>sonatype</id>
+      <activation>
+        <activeByDefault>true</activeByDefault>
+      </activation>
+      <properties>
+        <gpg.keyname>${env.GPG_PRIVATE_KEY}</gpg.keyname>
+        <gpg.passphrase>${env.GPG_PRIVATE_KEY_PASSPHRASE}</gpg.passphrase>
+      </properties>
+    </profile>
+  </profiles>
+</settings>
diff --git a/pom.xml b/pom.xml
index a08fa132..f534154e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -448,32 +448,6 @@
             <id>release</id>
             <build>
                 <plugins>
-                    <!-- calculate checksums of source release for Apache dist area -->
-                    <plugin>
-                        <groupId>net.nicoulaj.maven.plugins</groupId>
-                        <artifactId>checksum-maven-plugin</artifactId>
-                        <version>1.11</version>
-                        <executions>
-                            <execution>
-                                <id>source-release-checksum</id>
-                                <goals>
-                                    <goal>artifacts</goal>
-                                </goals>
-                                <phase>post-integration-test</phase>
-                                <configuration>
-                                    <algorithms>
-                                        <algorithm>MD5</algorithm>
-                                        <algorithm>SHA-1</algorithm>
-                                        <algorithm>SHA-512</algorithm>
-                                    </algorithms>
-                                    <includeClassifiers>source-release</includeClassifiers>
-                                    <excludeMainArtifact>true</excludeMainArtifact>
-                                    <csvSummary>false</csvSummary>
-                                    <attachChecksums>true</attachChecksums>
-                                </configuration>
-                            </execution>
-                        </executions>
-                    </plugin>
                     <!-- We want to sign the artifact, the POM, and all attached artifacts (except for SHA-512 checksum) -->
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
@@ -522,6 +496,18 @@
                             </execution>
                         </executions>
                     </plugin>
+                    <plugin>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
+                        <version>0.3.0</version>
+                        <extensions>true</extensions>
+                        <configuration>
+                            <publishingServerId>central</publishingServerId>
+                            <tokenAuth>true</tokenAuth>
+                            <autoPublish>true</autoPublish>
+                            <waitUntil>published</waitUntil>
+                        </configuration>
+                    </plugin>
                 </plugins>
             </build>
         </profile>