.forgejo/workflows/release.yaml

@@ -23,7 +23,6 @@ jobs:
           apt update
           apt install -y zip
           mkdir -p /root/.jreleaser
-          mkdir -p /root/.m2
           touch /root/.jreleaser/config.properties
 
       - name: maven-settings-xml-action
@@ -98,7 +97,7 @@ jobs:
             [
               "org.sonarsource.scanner.maven"
             ]
-          output_file: /root/.m2/settings.xml
+          output_file: .m2/settings.xml
 
       - name: Determine next version
         uses: https://github.com/obfu5c8/action-svu@v1
@@ -129,9 +128,9 @@ jobs:
         uses: https://github.com/actions/cache@v4
         with:
           path: ~/.sdkman
-          key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
+          key: ${{ runner.os }}-sdkman
           restore-keys: |
-            ${{ runner.os }}-sdkman-
+            ${{ runner.os }}-sdkman
         env:
           ACTIONS_STEP_DEBUG: true
 
@@ -139,9 +138,9 @@ jobs:
         uses: https://github.com/actions/cache@v4
         with:
           path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          key: ${{ runner.os }}-maven
           restore-keys: |
-            ${{ runner.os }}-maven-
+            ${{ runner.os }}-maven
         env:
           ACTIONS_STEP_DEBUG: true
 
@@ -156,6 +155,8 @@ jobs:
           MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
         run: |
           export GPG_TTY=$(tty)
+          git config user.name "${{ github.event.head_commit.committer.name }}"
+          git config user.email "${{ github.event.head_commit.committer.email }}"
           mvn -B --file pom.xml versions:set -DnewVersion=${{ env.NEW_VERSION }}
 
       - name: Run JReleaser (Changelog)
@@ -172,30 +173,13 @@ jobs:
           JRELEASER_GPG_PUBLIC_KEY: ${{ secrets.GPG_PUBLIC_KEY }}
           JRELEASER_GPG_SECRET_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
-      - name: Import GPG key
-        id: import-gpg
-        uses: https://github.com/crazy-max/ghaction-import-gpg@v6
-        with:
-          gpg_private_key: ${{ secrets.RELEASEBOT_PRIVATE_KEY }}
-          passphrase: ${{ secrets.RELEASEBOT_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-
-      - name: GPG user IDs
-        run: |
-          echo "fingerprint: ${{ steps.import-gpg.outputs.fingerprint }}"
-          echo "keyid:       ${{ steps.import-gpg.outputs.keyid }}"
-          echo "name:        ${{ steps.import-gpg.outputs.name }}"
-          echo "email:       ${{ steps.import-gpg.outputs.email }}"
-
       - name: Commit and push changes
         run: |
-          git config --global user.email "${{ steps.import-gpg.outputs.email }}"
+          git config user.name "${{ github.event.head_commit.committer.name }}"
-          git config --global user.name "${{ steps.import-gpg.outputs.name }}"
+          git config user.email "${{ github.event.head_commit.committer.email }}"
           git add pom.xml CHANGELOG.md
-          git commit -S -m "Release ${{ env.NEW_VERSION }}"
+          git commit -a -m "Release ${{ env.NEW_VERSION }}"
           git push
-
       - name: Build package and populate staging area for deployment
         run: |
           mvn -B --file pom.xml package

.forgejo/workflows/sonarqube.yaml

@@ -21,7 +21,6 @@ jobs:
           apt update
           apt install -y zip
           mkdir -p /root/.jreleaser
-          mkdir -p /root/.m2
           touch /root/.jreleaser/config.properties
 
       - name: Install syft
@@ -102,15 +101,15 @@ jobs:
             [
               "org.sonarsource.scanner.maven"
             ]
-          output_file: /root/.m2/settings.xml
+          output_file: .m2/settings.xml
 
       - name: Cache Java and Maven software
         uses: https://github.com/actions/cache@v4
         with:
           path: ~/.sdkman
-          key: ${{ runner.os }}-sdkman-${{ hashFiles('**/.sdkmanrc') }}
+          key: ${{ runner.os }}-sdkman
           restore-keys: |
-            ${{ runner.os }}-sdkman-
+            ${{ runner.os }}-sdkman
         env:
           ACTIONS_STEP_DEBUG: true
 
@@ -125,9 +124,9 @@ jobs:
         uses: https://github.com/actions/cache@v4
         with:
           path: ~/.m2/repository
-          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          key: ${{ runner.os }}-maven
           restore-keys: |
-            ${{ runner.os }}-maven-
+            ${{ runner.os }}-maven
         env:
           ACTIONS_STEP_DEBUG: true
 

CHANGELOG.md

@@ -1,7 +1,3 @@
-## [0.1.5]
-### 🛠  Build
-- [e7099e4](https://w9r.dev/pom/dependencies/commits/e7099e4) enable commit signing
-
 ## [0.1.4]
 ### 🐛 Fixes
 - [1928926](https://w9r.dev/pom/dependencies/commits/1928926) settings.xml path in sonarqube.yaml

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>dev.w9r.pom</groupId>
     <artifactId>dependencies</artifactId>
-    <version>0.1.5</version>
+    <version>0.1.4</version>
 
     <name>Common Dependency Project Object Model for Maven Builds</name>
     <description>Common dependencies and management of their versions</description>