GH workflow

Author: tobi-laa

.github/workflows/maven-publish.yml

@@ -27,14 +27,16 @@ jobs:
         with:
           java-version: '17'
           distribution: 'temurin'
-      - name: Decode GPG Key
-        run: |
-          mkdir -p ~/.gradle/
-          echo "${{secrets.GPG_PRIVATE_KEY}}" > ~/.gradle/secring.gpg.b64
-          base64 -d ~/.gradle/secring.gpg.b64 > ~/.gradle/secring.gpg
+          server-id: ossrh
+          server-username: OSSRH_USERNAME
+          server-password: OSSRH_TOKEN
+          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+          gpg-passphrase: GPG_PASSPHRASE
       - name: Publish package
-        # wraped the signing.password with single quotes as the password could contain special characters
-        run: ./gradlew publish -Psigning.keyId=${{secrets.GPG_PRIVATE_KEY_ID}} -Psigning.password='${{secrets.GPG_PASSPHRASE}}' -Psigning.secretKeyRingFile=$(echo ~/.gradle/secring.gpg) --warn --stacktrace
+        uses: gradle/gradle-build-action@749f47bda3e44aa060e82d7b3ef7e40d953bd629
+        with:
+          arguments: publish
         env:
-          OSSRH_USERNAME: ${{secrets.OSSRH_USERNAME}}
-          OSSRH_TOKEN: ${{secrets.OSSRH_TOKEN}}
+          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          OSSRH_TOKEN: ${{ secrets.OSSRH_TOKEN }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

build.gradle.kts

@@ -134,7 +134,7 @@ publishing {
     }
     repositories {
         maven {
-            name = "OSSRH"
+            name = "ossrh"
             val releasesRepoUrl = uri("https://oss.sonatype.org/service/local/staging/deploy/maven2/")
             val snapshotsRepoUrl = uri("https://oss.sonatype.org/content/repositories/snapshots")
             url = if (version.toString().endsWith("SNAPSHOT")) snapshotsRepoUrl else releasesRepoUrl
@@ -148,6 +148,7 @@ publishing {
 
 signing {
     sign(publishing.publications["mavenJava"])
+    useGpgCmd()
 }
 
 tasks.javadoc {