Releasing Java SDK packages » History » Revision 10
Revision 9 (Peter Amstutz, 07/08/2024 07:57 PM) → Revision 10/12 (Peter Amstutz, 07/08/2024 08:04 PM)
h1. Releasing Java SDK packages
The Java SDK is distributed on the Sonatype artifact repository. Here are the steps to release a new jar file:
reference: https://central.sonatype.org/publish/release/
# Build and upload package using https://ci.arvados.org/view/All/job/build-java-sdk
# Go to https://oss.sonatype.org and log in with the appropriate credentials (gopass oss.sonatype.org/curii)
# Under "Build Promotion" on the left sidebar, click on "Staging Repostories"
# Find "orgarvados-XXXX" and click on it
# In the toolstrip, click on "Close" -- this locks the repository against further changes and runs validation checks
# The validation checks take a few minutes. You can monitor it on the "Activity" tab
# Once the validations have passed, you'll be able to hit the "Release" button
# This moves the packages to the release repository and drops (deletes) the staging repository
# Reportedly there is lag of a few minutes on when a released package becomes visible / searchable
h2. Getting the authentication token for Sonatype
# Go to https://oss.sonatype.org and log in with the appropriate credentials (gopass oss.sonatype.org/curii)
# Click on "Curii" in the upper right and go to "Profile"
# There will be a drop down menu that says "Summary", click on it and select "User Token"
# There will be a button "Access User Token", click on it and it will give a random string for username and password
# Paste those into @gradle.properties@
# Update the credentials on Jenkins
h2. gradle.properties
To upload to Sonatype, you need the token (see above) and a secret key. On Jenkins, there is a package signing key which you need to also specify.
<pre>
ossrhUsername=...
ossrhPassword=...
signing.keyId=...
signing.password=
signing.secretKeyRingFile=...-secret-key.gpg
</pre>