- You must have commit rights on this repository.
- You must have deploy rights to Sonatype's SS Repository Hosting (OSSRH).
In your Maven settings.xml file (~/.m2/settings.xml), add a server entry with the id ossrh
. The username is your OSSRH username/Sonatype JIRA ID.
The password should only be stored encryptedly:
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
https://maven.apache.org/xsd/settings-1.0.0.xsd">
...
<servers>
<server>
<id>ossrh</id>
<username>kwin</username>
<password>*****</password>
</server>
</servers>
...
</settings>
These credentials are used to deploy to OSSRH.
In addition you need to setup GPG to create OpenPGP signatures. After installing https://www.gnupg.org/download/ you need to create key pair (if you don't have one yet) and make sure that the public key is distributed via hkp://pool.sks-keyservers.net.
e.g. gpg2 --keyserver hkp://pool.sks-keyservers.net --send-keys YOUR_KEY_ID_HERE
-- OSSRH also checks hkp://keys.openpgp.org and hkp://keyserver.ubuntu.com as backups so it might be a good idea to upload there.
It is recommended that your private key is protected with a passphrase. You can persist the passphrase in the settings.xml as well
<server>
<!-- has the passphrase for the gpg signing in encrypted format: http://maven.apache.org/plugins/maven-gpg-plugin/sign-mojo.html#passphraseServerId -->
<id>gpg.passphrase</id>
<!-- passphrase for your private key -->
<password>****</password>
</server>
Make sure that all issues assigned to the current milestone have been closed and all necessary pull requests have been merged and closed out. Don't proceed with the release until you know what you're releasing. ;)
-
Add a new heading to the CHANGELOG.md file with the release number and today's date. Change the link for the Unreleased changes. See https://github.com/Adobe-Consulting-Services/acs-aem-commons/commit/9a3f6e44870b8d5be353f7dd6fd6cf0d47a872fd for an example. Commit and push this change.
-
If this is a minor release, create two new Milestones in GitHub -- one for the next minor release and one for the first patch release. For example, if you are releasing 3.18.0, create 3.20.0 and 3.18.2.
-
If this is a patch release, create a new Milestone in GitHub for the next patch release. For example, if you are releasing 3.18.2, create 3.18.4.
-
Close the current milestone in GitHub issues.
-
Make sure that the issues and pull requests are associated with the proper milestone -- anything open for the current release should be moved to the next release, either minor or patch depending on the nature of the issue.
-
Ensure Java 8 is active (Java 11 breaks on the JavaDocs build in
mvn release:perform
) -
Run the release:
mvn release:prepare
followed bygit checkout master
. You may need to pass-Dgpg.passphrase=****
if your passphrase is not persisted in yoursettings.xml
. If you want to enter your passphrase manually at a prompt, add this to .bashrc or execute prior to mvn release:export GPG_TTY=$(tty)
and you can verify it works viaecho "test" | gpg --clearsign
-
Go to https://github.com/Adobe-Consulting-Services/acs-aem-commons/releases and edit the release tag, using the CHANGELOG data as the release text and attaching the content package zip files (both min and regular) to the release.
-
Log into https://oss.sonatype.org/ and close the staging repository. Closing the staging repo will automatically push the artifacts to Maven Central after a small delay (4 hours for all mirrors to catch up)
-
Add a release announcement (and any other docs) to the documentation site.
-
If this is a minor release, check out the release tag and run the script
copy-javadoc.sh
to update the JavaDoc on the documentation site. Commit and push the changes the script makes. Note: This script assumes you have the docs site checked out in a directory calledadobe-consulting-services.github.io