From 4a911b60739044c8cd22d2f3b4cc6365f0824c94 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Attila=20M=C3=A9sz=C3=A1ros?= Date: Thu, 22 Oct 2026 13:34:15 +0200 Subject: [PATCH] fix(ci): restore id-based credential matching for Maven 3.10 deploys Maven 3.10 scopes server credentials to declared repository origins, and the 'central' server written by actions/setup-java only declares repo.maven.apache.org, so uploads to central.sonatype.com were sent unauthenticated and rejected with HTTP 401. --- .github/workflows/release-project-in-dir.yml | 2 +- .github/workflows/snapshot-releases.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-project-in-dir.yml b/.github/workflows/release-project-in-dir.yml index 52ce25ea72..ea375c3d93 100644 --- a/.github/workflows/release-project-in-dir.yml +++ b/.github/workflows/release-project-in-dir.yml @@ -129,7 +129,7 @@ jobs: ./mvnw ${MAVEN_ARGS} versions:set -DnewVersion="${RELEASE_VERSION}" versions:commit -DprocessAllModules - name: Publish to Apache Maven Central - run: ./mvnw package deploy -Prelease + run: ./mvnw package deploy -Prelease -Dmaven.repository.credentialScope=id env: MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }} MAVEN_CENTRAL_TOKEN: ${{ secrets.NEXUS_PASSWORD }} diff --git a/.github/workflows/snapshot-releases.yml b/.github/workflows/snapshot-releases.yml index 418437614c..04cc3d4249 100644 --- a/.github/workflows/snapshot-releases.yml +++ b/.github/workflows/snapshot-releases.yml @@ -43,7 +43,7 @@ jobs: gpg-passphrase: MAVEN_GPG_PASSPHRASE - name: Publish to Apache Maven Central - run: ./mvnw package deploy -Prelease + run: ./mvnw package deploy -Prelease -Dmaven.repository.credentialScope=id env: MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }} MAVEN_CENTRAL_TOKEN: ${{ secrets.NEXUS_PASSWORD }}