From 38d36b0535f19c957f79ac75df08a719a01ec4cc Mon Sep 17 00:00:00 2001
From: Norbert Biczo <pyrooka@users.noreply.github.com>
Date: Fri, 18 Jul 2025 17:15:52 +0200
Subject: [PATCH] fix(build): migrate to central publishing plugin

Signed-off-by: Norbert Biczo <pyrooka@users.noreply.github.com>
---
 .github/workflows/publish.yaml | 10 +++++-----
 .secrets.baseline              |  6 +++---
 pom.xml                        | 25 ++++++++++---------------
 3 files changed, 18 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index f07f29e38c..a7e40ee287 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -29,9 +29,9 @@ jobs:
           distribution: 'adopt'
           cache: 'maven'
           # Configure ~/.m2/settings.xml
-          server-id: ossrh
-          server-username: OSSRH_USERNAME
-          server-password: OSSRH_PASSWORD
+          server-id: central
+          server-username: CP_USERNAME
+          server-password: CP_PASSWORD
           # Import GPG key into build agent's local keystore
           gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
           gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
@@ -50,8 +50,8 @@ jobs:
 
       - name: Publish to Maven Central
         env:
-          OSSRH_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-          OSSRH_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
+          CP_USERNAME: ${{ secrets.CP_USERNAME }}
+          CP_PASSWORD: ${{ secrets.CP_PASSWORD }}
           GPG_KEYNAME: ${{ secrets.GPG_KEYNAME }}
           GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
         run: |
diff --git a/.secrets.baseline b/.secrets.baseline
index a9b5c2c1ed..e16416ddfc 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -3,7 +3,7 @@
     "files": "package-lock.json|go.sum|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2025-01-09T18:41:28Z",
+  "generated_at": "2025-07-18T15:15:13Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -67,7 +67,7 @@
   "results": {
     ".github/workflows/publish.yaml": [
       {
-        "hashed_secret": "87ddb19c18c56534a4011f47f38530f6df9a8a80",
+        "hashed_secret": "b8fb27ac44ff8a4d5237588af39c5fb65bbedc3f",
         "is_secret": false,
         "is_verified": false,
         "line_number": 34,
@@ -178,7 +178,7 @@
         "hashed_secret": "69ceb65c6e41b82105f435246134b03da6fcdbf7",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 3405,
+        "line_number": 2535,
         "type": "Secret Keyword",
         "verified_result": null
       }
diff --git a/pom.xml b/pom.xml
index 53abfe22ea..60e1006d7b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -27,7 +27,7 @@
         <surefire-version>3.1.2</surefire-version>
         <jacoco-plugin-version>0.8.11</jacoco-plugin-version>
         <maven-deploy-plugin-version>3.1.1</maven-deploy-plugin-version>
-        <nexus-staging-plugin-version>1.6.13</nexus-staging-plugin-version>
+        <central-publish-plugin-version>0.8.0</central-publish-plugin-version>
         <maven-gpg-plugin-version>3.1.0</maven-gpg-plugin-version>
         <maven-source-plugin-version>3.3.0</maven-source-plugin-version>
         <maven-shade-plugin-version>3.5.1</maven-shade-plugin-version>
@@ -223,9 +223,9 @@
                     <version>${maven-deploy-plugin-version}</version>
                 </plugin>
                 <plugin>
-                    <groupId>org.sonatype.plugins</groupId>
-                    <artifactId>nexus-staging-maven-plugin</artifactId>
-                    <version>${nexus-staging-plugin-version}</version>
+                    <groupId>org.sonatype.central</groupId>
+                    <artifactId>central-publishing-maven-plugin</artifactId>
+                    <version>${central-publish-plugin-version}</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
@@ -512,25 +512,20 @@
                     <!-- We don't deploy snapshot releases -->
                 </snapshotRepository>
                 <repository>
-                    <!-- This is where the nexus staging plugin will publish
-                    artifacts -->
-                    <id>ossrh</id>
-                    <url>
-                        https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
+                    <id>central</id>
+                    <url>https://central.sonatype.com/repository/maven-snapshots/</url>
                 </repository>
             </distributionManagement>
 
             <build>
                 <plugins>
                     <plugin>
-                        <groupId>org.sonatype.plugins</groupId>
-                        <artifactId>nexus-staging-maven-plugin</artifactId>
+                        <groupId>org.sonatype.central</groupId>
+                        <artifactId>central-publishing-maven-plugin</artifactId>
                         <extensions>true</extensions>
                         <configuration>
-                            <serverId>ossrh</serverId>
-                            <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                            <autoReleaseAfterClose>true</autoReleaseAfterClose>
-                            <keepStagingRepositoryOnCloseRuleFailure>true</keepStagingRepositoryOnCloseRuleFailure>
+                            <publishingServerId>central</publishingServerId>
+                            <autoPublish>true</autoPublish>
                         </configuration>
                     </plugin>
                     <plugin>