From 67bb7c8d282a1df13d6784fb8295dfdd00b72de7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Attila=20M=C3=A9sz=C3=A1ros?= Date: Tue, 3 Nov 2026 11:38:06 -0800 Subject: [PATCH] fix(ci): restore id-based credential matching for Maven 3.10 deploys Maven 3.10 scopes server credentials to declared repository origins, and the 'central' server written by actions/setup-java only declares repo.maven.apache.org, so uploads to central.sonatype.com are sent unauthenticated and rejected with HTTP 401. --- .github/workflows/master-snapshot-release.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/master-snapshot-release.yml b/.github/workflows/master-snapshot-release.yml index ae32fbb..b7242a1 100644 --- a/.github/workflows/master-snapshot-release.yml +++ b/.github/workflows/master-snapshot-release.yml @@ -47,7 +47,7 @@ jobs: gpg-passphrase: MAVEN_GPG_PASSPHRASE - name: Publish to Apache Maven Central - run: mvn package deploy -Prelease + run: mvn package deploy -Prelease -Dmaven.repository.credentialScope=id env: MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }} MAVEN_CENTRAL_TOKEN: ${{ secrets.NEXUS_PASSWORD }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c90c6b9..144ff51 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,7 +28,7 @@ jobs: RELEASE_VERSION: ${{ github.event.release.tag_name }} - name: Publish to Apache Maven Central - run: mvn package deploy -Prelease + run: mvn package deploy -Prelease -Dmaven.repository.credentialScope=id env: MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }} MAVEN_CENTRAL_TOKEN: ${{ secrets.NEXUS_PASSWORD }}