Skip to content

Fix/maven central portal migration#764

Merged
Periecle merged 1 commit into
developfrom
fix/maven-central-portal-migration
Jun 29, 2026
Merged

Fix/maven central portal migration#764
Periecle merged 1 commit into
developfrom
fix/maven-central-portal-migration

Conversation

@Periecle

@Periecle Periecle commented Jun 29, 2026

Copy link
Copy Markdown

Summary by CodeRabbit

  • Chores
    • Updated the Maven GPG plugin version used during builds.
    • Removed obsolete GPG-related configuration from the parent project’s build settings.

@coderabbitai

coderabbitai Bot commented Jun 29, 2026

Copy link
Copy Markdown

Review Change Stack

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0a363ff2-4d44-4056-88d9-2a63d0447f85

📥 Commits

Reviewing files that changed from the base of the PR and between 224a421 and 38d4e57.

📒 Files selected for processing (2)
  • feign-reactor-parent/pom.xml
  • pom.xml

📝 Walkthrough

Walkthrough

The root Maven POM updates the maven-gpg-plugin version, and the parent POM removes several GPG-related properties from its properties block.

Changes

Maven GPG Updates

Layer / File(s) Summary
GPG version and properties
pom.xml, feign-reactor-parent/pom.xml
Bumps maven-gpg-plugin.version from 3.2.5 to 3.2.8 and removes the GPG-related properties from the parent POM.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Poem

🐇 I hopped by the pom with a nibble and a grin,
Bumped GPG up and trimmed some bits within.
No more dusty props in the parent tree,
Just tidy Maven paths for you and me.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main change: migrating Maven publishing to Sonatype Central.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/maven-central-portal-migration

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 PMD (7.25.0)
pom.xml

[ERROR] Cannot load ruleset .coderabbit-pmd-ruleset.xml: Cannot resolve rule/ruleset reference '.coderabbit-pmd-ruleset.xml'. Make sure the resource is a valid file or URL and is on the CLASSPATH. Use --debug (or a fine log level) to see the current classpath.
[WARN] Progressbar rendering conflicts with reporting to STDOUT. No progressbar will be shown. Try running with argument -r to output the report to a file instead.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

feign-reactor-parent forced maven-gpg-plugin to sign with gpg.keyname
3EEF24C7 and set gpg.defaultKeyring=false. Under maven-gpg-plugin 3.2.5
that combination failed to resolve the key in CI ("gpg: skipped
3EEF24C7: No secret key"), even though the org GPG_PRIVATE_KEY (which is
that key) was imported by setup-java -- the root module, which sets no
keyname, signed fine with the default key.

- Drop the hardcoded gpg.keyname/defaultKeyring (plus deprecated
  useagent/lockMode) so every module signs with the default imported
  key, matching the root module that already worked.
- Bump maven-gpg-plugin 3.2.5 -> 3.2.8 to align with the proven
  testcontainers-spring-boot release setup.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@pom.xml`:
- Around line 64-81: The CircleCI Maven settings server id is still mismatched
with the release configuration. Update the `<id>` in
`.circleci/circleci.settings.xml` from the old value to `central` so it matches
the `server-id: central` and `-P central` usage in the release flow, and ensure
the Maven deploy configuration in the CircleCI settings template references the
same server entry.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: a04ba92c-10fa-40e3-9a1a-ebb5ac582d13

📥 Commits

Reviewing files that changed from the base of the PR and between 0e67ac7 and 224a421.

📒 Files selected for processing (2)
  • feign-reactor-parent/pom.xml
  • pom.xml
💤 Files with no reviewable changes (1)
  • feign-reactor-parent/pom.xml

Comment thread pom.xml
Comment on lines +64 to +81
<id>central</id>
<url>https://central.sonatype.com/repository/maven-snapshots/</url>
</snapshotRepository>
<repository>
<id>ossrh</id>
<url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
</repository>
</distributionManagement>

<profiles>
<profile>
<id>ossrh</id>
<id>central</id>
<build>
<plugins>
<plugin>
<groupId>org.sonatype.plugins</groupId>
<artifactId>nexus-staging-maven-plugin</artifactId>
<version>${nexus-staging-maven-plugin.version}</version>
<groupId>org.sonatype.central</groupId>
<artifactId>central-publishing-maven-plugin</artifactId>
<version>${central-publishing-maven-plugin.version}</version>
<extensions>true</extensions>
<configuration>
<serverId>ossrh</serverId>
<nexusUrl>https://oss.sonatype.org/</nexusUrl>
<autoReleaseAfterClose>true</autoReleaseAfterClose>
<publishingServerId>central</publishingServerId>
<autoPublish>true</autoPublish>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Old OSSRH references =="
rg -n -C2 'ossrh|-Possrh|nexus-staging-maven-plugin|<id>ossrh</id>|serverId>ossrh|server-id ossrh' .

echo
echo "== New Central references =="
rg -n -C2 'central-publishing-maven-plugin|publishingServerId|<id>central</id>|-Pcentral' .

echo
echo "== Candidate workflow / settings files =="
fd -HI '(^pom\.xml$|^settings.*\.xml$|.*\.ya?ml$|.*\.sh$|^README.*$)' .

Repository: PlaytikaOSS/feign-reactive

Length of output: 191


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Files of interest =="
fd -HI '(^pom\.xml$|^settings.*\.xml$|.*\.ya?ml$|.*\.sh$|^README.*$|^CONTRIBUTING.*$|^release.*$|^publish.*$)' .

echo
echo "== OSSRH / nexus-staging references =="
rg -n -C2 'ossrh|-Possrh|nexus-staging-maven-plugin|serverId>ossrh|<id>ossrh</id>' . || true

echo
echo "== Central publishing references =="
rg -n -C2 'central-publishing-maven-plugin|publishingServerId|<id>central</id>|-Pcentral|central.sonatype.com' . || true

echo
echo "== Workflow and settings candidates =="
fd -HI '(\.github/workflows/.*\.ya?ml$|settings.*\.xml$|.*\.sh$|README.*$|CONTRIBUTING.*$)' .

Repository: PlaytikaOSS/feign-reactive

Length of output: 3384


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Search for ossrh / central in candidate files =="
rg -n -C2 'ossrh|-Possrh|nexus-staging-maven-plugin|publishingServerId|central|serverId|settings.xml' \
  .circleci/circleci.settings.xml \
  .github/workflows/maven.yml \
  .github/workflows/release.yml \
  README.md \
  feign-reactor-benchmarks/README.md \
  feign-reactor-spring-configuration/README.md \
  || true

echo
echo "== Read workflow/settings snippets =="
for f in .circleci/circleci.settings.xml .github/workflows/maven.yml .github/workflows/release.yml README.md; do
  echo "--- $f ---"
  sed -n '1,220p' "$f"
  echo
done

Repository: PlaytikaOSS/feign-reactive

Length of output: 14087


Update the CircleCI Maven settings server id to central
.circleci/circleci.settings.xml still defines <id>ossrh</id>, while the release workflow now uses server-id: central and -P central. If CircleCI uses this settings template, deploy will look for the wrong server entry.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@pom.xml` around lines 64 - 81, The CircleCI Maven settings server id is still
mismatched with the release configuration. Update the `<id>` in
`.circleci/circleci.settings.xml` from the old value to `central` so it matches
the `server-id: central` and `-P central` usage in the release flow, and ensure
the Maven deploy configuration in the CircleCI settings template references the
same server entry.

@Periecle
Periecle force-pushed the fix/maven-central-portal-migration branch from 224a421 to 38d4e57 Compare June 29, 2026 09:56
@Periecle
Periecle merged commit e0fe272 into develop Jun 29, 2026
4 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant