Skip to content

Latest commit

 

History

History
45 lines (28 loc) · 1.97 KB

RELEASING.md

File metadata and controls

45 lines (28 loc) · 1.97 KB
Raw

Releasing

Release is done on github. Do not release from your local machine.

Create an issue

Create a release issue using the release template

Create a tag

Tag the release at the version you wish (ex v0.5.3), this MUST match the project version (0.5.3). See version info in gradle.properties.

Release sigstore-java and sigstore-maven-plugin

  • Use the "Release sigstore-java and sigstore-maven-plugin to Maven Central" action against the tagged version `v0.5.3'. This action builds, signs and pushes the artifacts to Maven Central.

Complete the release on maven central

Releasing to maven central is a permanent action, it cannot be reverted

Release the bundle:

  1. Log into sonatype (s01)
  2. Click "Staging Repositories" on the left navbar
  3. Select your artifact, "close" it to begin checks
  4. After all checks have passed, "release" it
    1. If checks are failing, "drop" the bundle and fix the release process
  5. Releases show up on Maven Central roughly 1-2 hours after release

Release sigstore-gradle-plugin to Gradle Plugin Portal

  • Use the "Release sigstore gradle plugins to Gradle Plugin Portal" action against the tagged version `v0.5.3'. This action builds, signs and pushes the artifacts to the Gradle Plugin Portal
  • There is no follow up here, plugins are auto released on the plugin portal.## Reverting a failed release (Github only)

If a release build fails for any reason or the resulting artifacts are not as expected, you must clean-up any tags or releases built during the action

  1. Delete the release from Releases
  2. Delete the tag from Tags

Maven Central

You can try to contact support but typically releases are permanent.

Gradle Plugin Portal

If you wish to revert a release, you must login to the portal using sigstore-java-releasers within 7 days to delete a release.