Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move away from Bintray #435

Closed
nipafx opened this issue Feb 28, 2021 · 3 comments
Closed

Move away from Bintray #435

nipafx opened this issue Feb 28, 2021 · 3 comments

Comments

@nipafx
Copy link
Member

nipafx commented Feb 28, 2021

Bintray gets shut down on May 1st, so we need to move away from it. I think it would be a good idea to see what other Shipkit-based projects do.

@aepfli
Copy link
Member

aepfli commented Apr 13, 2021

https://github.com/gradle-nexus/publish-plugin/ might be a good solution, as this seems to do all the necessary steps. i will investigate further into this

@aepfli
Copy link
Member

aepfli commented Apr 20, 2021

based on @nipafx link in discord (https://github.com/rwinch/gradle-publish-ossrh-sample) - we should evaluate if we need signing, yes it is a security feature and surely nice to have, but is it needed.

We could start with this as our first iteration and add signing at a later stage

@aepfli aepfli mentioned this issue Apr 20, 2021
4 tasks
@nipafx
Copy link
Member Author

nipafx commented Apr 27, 2021

NB: The credentials for the Nexus token and the PGP key are now organization secrets, so other projects can access them as well if they're added to the list of projects that they're shared with.

nipafx pushed a commit that referenced this issue Apr 27, 2021
With Bintray closing for new uploads soon[1], we recofnigured the
build to release to Sonatype's Nexus aka "Maven Central" directly.
That meant:

* replacing Gradle plugin _com.jfrog.bintray_ with
  _io.github.gradle-nexus.publish-plugin_ [2]
* adding a PGP key for signing as a secrets (`JUNIT_PIONEER_PGP_...`)


We took the opportunity to make the new secrets as well as the Nexus
credentials organization secrets (as opposed to just the project).


[1] https://jfrog.com/blog/into-the-sunset-bintray-jcenter-gocenter-and-chartcenter/
[2] https://docs.gradle.org/current/userguide/signing_plugin.html
@nipafx nipafx closed this as completed in a7986da Apr 27, 2021
Exploring Io automation moved this from To do to Done Apr 27, 2021
@Michael1993 Michael1993 unpinned this issue Apr 28, 2021
nipafx pushed a commit that referenced this issue Apr 28, 2021
A few loosely related changes that finish the release process update:

* adds `GITHUB_TOKEN` to `release-build.yml`
  (was erroneously removed in #463)
* removes `docs/release-notes.md` and updates the documentation
  accordingly because Shipkit no longer writes release notes
* removes all mentions of JCenter and Bintray

Unrelated, this change replaces links to codefx.org with nipafx.dev.

Related to: #435, #442
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
No open projects
Development

No branches or pull requests

2 participants