Skip to content

build: drop the OSSRH publishing block and the ossrh credentials the CI build carried - #11

Merged
astrapi69 merged 1 commit into
developfrom
build/no-ossrh
Oct 29, 2026
Merged

astrapi69 merged 1 commit into
developfrom
build/no-ossrh

Conversation

@astrapi69

Copy link
Copy Markdown
Member

What

  • gradle/publishing.gradle: the repositories { maven { credentials { ... } setUrl(...) } } block that addressed OSSRH is gone; a comment says where publishing goes now.
  • gradle.properties: projectRepositoriesUserNameKey and projectRepositoriesPasswordKey are gone. The OSSRH URL and name properties stay because gradle/repositories.gradle still lists those repositories for resolving.
  • .github/workflows/gradle.yml: no ossrhUsername/ossrhPassword env for the build.

Why

OSSRH (oss.sonatype.org) was shut down on 2025-06-30. The block still read ossrhUsername/ossrhPassword through System.getenv(...) ?: project.property(...) while a release build was configured; without a value such a build fails at configuration with a MissingPropertyException, which is why the CI carried the organization's OSSRHUSERNAME/OSSRHPASSWORD secrets. Those organization secrets are to be removed; this repository was one of four in lightblueseas whose build read them (measured 2026-10-29 over the workflows of all 86 repositories).

Publishing to Maven Central goes through the Central Portal; the family's form is the nmcp setup in lightblueseas/email-tails gradle/publishing.gradle, to be ported when this repository is next released.

Checked: ./gradlew help evaluates on JDK 21 with Gradle 8.13-rc-2; no ossrh or projectRepositories*Key left in gradle, properties or workflow files.

🤖 Generated with Claude Code

…CI build carried

OSSRH (oss.sonatype.org) was shut down on 2025-06-30. The repositories block in
gradle/publishing.gradle still addressed it and read ossrhUsername/ossrhPassword from the
environment while the build was configured, so gradle.yml had to hand the organization's
OSSRHUSERNAME/OSSRHPASSWORD secrets to every build, and the secrets cannot be removed from the
organization while a build would fail at configuration without them. The block, the two
properties naming the variables and the env lines of the workflow go; the resolving repositories
in gradle/repositories.gradle are untouched. Publishing to Maven Central goes through the Central
Portal, in the family's nmcp form (lightblueseas/email-tails gradle/publishing.gradle), when this
repository is next released.
@astrapi69
astrapi69 merged commit 9661bf6 into develop Oct 29, 2026
1 check passed
@astrapi69
astrapi69 deleted the build/no-ossrh branch October 29, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants