Setup Sonatype publishing

.gitea/workflows/release.yaml

@@ -39,4 +39,4 @@ jobs:
       - name: Run tests
         run: ./gradlew --info --stacktrace test
       - name: Upload to Maven Central
-        run: ./gradlew --debug publish
+        run: ./gradlew publishToMavenCentral

LICENSE

@@ -1,60 +1,3 @@
-Attribution-NoDerivatives 4.0 International
-
-=======================================================================
-
-Creative Commons Corporation ("Creative Commons") is not a law firm and
-does not provide legal services or legal advice. Distribution of
-Creative Commons public licenses does not create a lawyer-client or
-other relationship. Creative Commons makes its licenses and related
-information available on an "as-is" basis. Creative Commons gives no
-warranties regarding its licenses, any material licensed under their
-terms and conditions, or any related information. Creative Commons
-disclaims all liability for damages resulting from their use to the
-fullest extent possible.
-
-Using Creative Commons Public Licenses
-
-Creative Commons public licenses provide a standard set of terms and
-conditions that creators and other rights holders may use to share
-original works of authorship and other material subject to copyright
-and certain other rights specified in the public license below. The
-following considerations are for informational purposes only, are not
-exhaustive, and do not form part of our licenses.
-
-     Considerations for licensors: Our public licenses are
-     intended for use by those authorized to give the public
-     permission to use material in ways otherwise restricted by
-     copyright and certain other rights. Our licenses are
-     irrevocable. Licensors should read and understand the terms
-     and conditions of the license they choose before applying it.
-     Licensors should also secure all rights necessary before
-     applying our licenses so that the public can reuse the
-     material as expected. Licensors should clearly mark any
-     material not subject to the license. This includes other CC-
-     licensed material, or material used under an exception or
-     limitation to copyright. More considerations for licensors:
-    wiki.creativecommons.org/Considerations_for_licensors
-
-     Considerations for the public: By using one of our public
-     licenses, a licensor grants the public permission to use the
-     licensed material under specified terms and conditions. If
-     the licensor's permission is not necessary for any reason--for
-     example, because of any applicable exception or limitation to
-     copyright--then that use is not regulated by the license. Our
-     licenses grant only permissions under copyright and certain
-     other rights that a licensor has authority to grant. Use of
-     the licensed material may still be restricted for other
-     reasons, including because others have copyright or other
-     rights in the material. A licensor may make special requests,
-     such as asking that all changes be marked or described.
-     Although not required by our licenses, you are encouraged to
-     respect those requests where reasonable. More considerations
-     for the public:
-    wiki.creativecommons.org/Considerations_for_licensees
-
-
-=======================================================================
-
 Creative Commons Attribution-NoDerivatives 4.0 International Public
 License
 
@@ -389,5 +332,4 @@ understandings, or agreements concerning use of licensed material. For
 the avoidance of doubt, this paragraph does not form part of the
 public licenses.
 
-Creative Commons may be contacted at creativecommons.org.
+Creative Commons may be contacted at creativecommons.org.
-

build.gradle

@@ -1,7 +1,25 @@
+/**
+ Copyright (c) 2024 John Ahlroos
+
+ Creative Commons Attribution-NoDerivatives 4.0 International Public License
+
+ By exercising the Licensed Rights (defined below), You accept and agree
+ to be bound by the terms and conditions of this Creative Commons
+ Attribution-NoDerivatives 4.0 International Public License ("Public
+ License"). To the extent this Public License may be interpreted as a
+ contract, You are granted the Licensed Rights in consideration of Your
+ acceptance of these terms and conditions, and the Licensor grants You
+ such rights in consideration of benefits the Licensor receives from
+ making the Licensed Material available under these terms and
+ conditions.
+
+ Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ */
+
 plugins {
     id 'java-library'
-    id 'maven-publish'
     id 'signing'
+    id 'maven-publish'
 }
 
 group = 'com.devsoap'
@@ -37,70 +55,8 @@ test {
     }
 }
 
-publishing {
-    repositories {
-        maven {
-            name = "sonatype"
-            url = uri("https://central.sonatype.com/api/v1/publisher/upload")
-            credentials(HttpHeaderCredentials) {
-                name = "Authorization"
-                value = "Bearer ${ findProperty('SONATYPE_TOKEN') as String }"
-            }
-            authentication {
-                header(HttpHeaderAuthentication)
-            }
-        }
-    }
-    publications {
-        mavenJava(MavenPublication) {
-            artifactId = 'assertj-json'
-            from components.java
-            versionMapping {
-                usage('java-api') {
-                    fromResolutionOf('runtimeClasspath')
-                }
-                usage('java-runtime') {
-                    fromResolutionResult()
-                }
-            }
-            pom {
-                name = 'AssertJ JSON'
-                description = 'JSON assertions for AssertJ'
-                url = 'https://code.devsoap.com/john/assertj-json'
-                licenses {
-                    license {
-                        name = 'Creative Commons Attribution-NoDerivatives 4.0 International'
-                        url = 'https://creativecommons.org/licenses/by-nd/4.0'
-                    }
-                }
-                developers {
-                    developer {
-                        id = 'john'
-                        name = 'John Ahlroos'
-                        email = 'john@ahlroos.me'
-                        organization = "Devsoap"
-                        organizationUrl = "https://devsoap.com"
-                        timezone = "Europe/Madrid"
-                    }
-                }
-                scm {
-                    connection = 'scm:git:ssh://git@code.devsoap.com:john/assertj-json.git'
-                    developerConnection = 'scm:git:ssh://git@code.devsoap.com:john/assertj-json.git'
-                    url = 'https://code.devsoap.com/john/assertj-json'
-                }
-            }
-        }
-    }
-}
-
-signing {
-    required { gradle.taskGraph.hasTask("publish") }
-    def signingKey = findProperty("DEVSOAP_GPG_KEY") as String
-    def signingPassword = findProperty("DEVSOAP_GPG_PASSWORD") as String
-    useInMemoryPgpKeys(signingKey, signingPassword)
-    sign publishing.publications.mavenJava
-}
-
 javadoc {
     options.addBooleanOption('html5', true)
-}
+}
+
+apply from: 'publish.gradle'

gradle.properties

@@ -0,0 +1,2 @@
+signing.gnupg.useLegacyGpg=true
+signing.gnupg.executable=gpg2

publish.gradle

@@ -0,0 +1,232 @@
+/**
+ Copyright (c) 2024 John Ahlroos
+
+ Creative Commons Attribution-NoDerivatives 4.0 International Public License
+
+ By exercising the Licensed Rights (defined below), You accept and agree
+ to be bound by the terms and conditions of this Creative Commons
+ Attribution-NoDerivatives 4.0 International Public License ("Public
+ License"). To the extent this Public License may be interpreted as a
+ contract, You are granted the Licensed Rights in consideration of Your
+ acceptance of these terms and conditions, and the Licensor grants You
+ such rights in consideration of benefits the Licensor receives from
+ making the Licensed Material available under these terms and
+ conditions.
+
+ Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ */
+import com.google.common.hash.HashCode
+import com.google.common.hash.Hashing
+import com.google.common.io.Files
+import java.nio.charset.StandardCharsets
+
+buildscript {
+    repositories {
+        mavenCentral()
+    }
+    dependencies {
+        classpath 'com.google.guava:guava:33.3.1-jre'
+    }
+}
+
+ext {
+    hasSignatureKey = findProperty("DEVSOAP_GPG_KEY_BASE64") != null
+    sonatypeToken = findProperty("SONATYPE_TOKEN") as String
+    signingKeyBase64 = (findProperty("DEVSOAP_GPG_KEY_BASE64") as String)?.getBytes(StandardCharsets.UTF_8)
+    signingKey = hasSignatureKey ? new String(Base64.decoder.decode(signingKeyBase64)) : ""
+    signingPassword = hasSignatureKey ? findProperty("DEVSOAP_GPG_PASSWORD") : ""
+}
+
+signing {
+    if (hasSignatureKey) {
+        useInMemoryPgpKeys(signingKey, signingPassword)
+    }
+}
+
+publishing {
+    publications {
+        mavenJava(MavenPublication) {
+            from components.java
+            pom {
+                groupId = 'com.devsoap'
+                name = 'assertj-json'
+                description = 'Fluent JSON API for AssertJ'
+                url = 'https://code.devsoap.com/john/assertj-json'
+
+                licenses {
+                    license {
+                        name = 'CC BY-ND 4.0'
+                        url = 'https://creativecommons.org/licenses/by-nd/4.0/'
+                    }
+                }
+
+                scm {
+                    url = 'https://code.devsoap.com/john/assertj-json'
+                    connection = 'scm:git://code.devsoap.com/john/assertj-json.git'
+                    developerConnection = 'scm:git://code.devsoap.com/john/assertj-json.git'
+                }
+
+                developers {
+                    developer {
+                        id = 'john'
+                        name = 'John Ahlroos'
+                        email = 'john@devsoap.com'
+                        organizationUrl = 'https://devsoap.com'
+                    }
+                }
+            }
+        }
+    }
+}
+
+/**
+ * Generates a ZIP archive compatible for uploading to Sonatype Maven Portal
+ */
+tasks.register('generateMavenCentralBundle', Zip) {
+    group 'publishing'
+    dependsOn tasks.withType(Sign)
+
+    def workdir = "${project.group.replace('.', '/')}/${project.name}/$version"
+
+    from jar.outputs.files into workdir
+    from javadocJar.outputs.files into workdir
+    from sourcesJar.outputs.files into workdir
+
+    from generateChecksumsMd5.outputs.files into workdir
+    from generateChecksumsSha256.outputs.files into workdir
+    from generateChecksumsSha1.outputs.files into workdir
+
+    from (generatePomFileForMavenJavaPublication.outputs.files) {
+        include "pom-default.xml"
+        rename { "${project.name}-${project.version}.pom"}
+    }
+
+    if (hasSignatureKey) {
+        from (signFiles.outputs.files) {
+            exclude "pom-default.xml.asc"
+        }
+        from (signFiles.outputs.files) {
+            include "pom-default.xml.asc"
+            rename { "${project.name}-${project.version}.pom.asc"}
+        }
+    }
+
+    archiveBaseName = "maven-central-bundle"
+    destinationDirectory = layout.buildDirectory.dir('sonatype')
+}
+
+/**
+ * Creates MD5 checksums for all artifacts
+ */
+tasks.register('generateChecksumsMd5') {
+    group 'signatures'
+    Provider<Directory> outputDir
+    def function = Hashing.md5()
+    def algorithm = 'md5'
+    configure {
+        inputs.files jar.outputs.files
+        inputs.files sourcesJar.outputs.files
+        inputs.files javadocJar.outputs.files
+        inputs.files generatePomFileForMavenJavaPublication.outputs.files
+        outputs.dir(outputDir = layout.buildDirectory.dir("sonatype/checksums/${algorithm}"))
+    }
+    doLast {
+        inputs.files.forEach {file ->
+            def filename = file.name.startsWith("pom-default") ? "${project.name}-${project.version}.pom" : file.name
+            HashCode hashCode = Files.asByteSource(file).hash(function)
+            Files.write(hashCode.toString().getBytes(StandardCharsets.UTF_8), new File(outputDir.get().asFile, "${filename}.${algorithm}"))
+        }
+    }
+}
+
+/**
+ * Creates SHA1 checksums for all artifacts
+ */
+tasks.register('generateChecksumsSha1') {
+    group 'signatures'
+    Provider<Directory> outputDir
+    def function = Hashing.sha1()
+    def algorithm = 'sha1'
+    configure {
+        inputs.files jar.outputs.files
+        inputs.files sourcesJar.outputs.files
+        inputs.files javadocJar.outputs.files
+        inputs.files generatePomFileForMavenJavaPublication.outputs.files
+        outputs.dir(outputDir = layout.buildDirectory.dir("sonatype/checksums/${algorithm}"))
+    }
+    doLast {
+        inputs.files.forEach {file ->
+            def filename = file.name.startsWith("pom-default") ? "${project.name}-${project.version}.pom" : file.name
+            HashCode hashCode = Files.asByteSource(file).hash(function)
+            Files.write(hashCode.toString().getBytes(StandardCharsets.UTF_8), new File(outputDir.get().asFile, "${filename}.${algorithm}"))
+        }
+    }
+}
+
+/**
+ * Creates SHA256 checksums for all artifacts
+ */
+tasks.register('generateChecksumsSha256') {
+    group 'signatures'
+    Provider<Directory> outputDir
+    def function = Hashing.sha256()
+    def algorithm = 'sha256'
+    configure {
+        inputs.files jar.outputs.files
+        inputs.files sourcesJar.outputs.files
+        inputs.files javadocJar.outputs.files
+        inputs.files generatePomFileForMavenJavaPublication.outputs.files
+        outputs.dir(outputDir = layout.buildDirectory.dir("sonatype/checksums/${algorithm}"))
+    }
+    doLast {
+        inputs.files.forEach {file ->
+            def filename = file.name.startsWith("pom-default") ? "${project.name}-${project.version}.pom" : file.name
+            HashCode hashCode = Files.asByteSource(file).hash(function)
+            Files.write(hashCode.toString().getBytes(StandardCharsets.UTF_8), new File(outputDir.get().asFile, "${filename}.${algorithm}"))
+        }
+    }
+}
+
+/**
+ * Uploads the ZIP bundle to Maven Central via the Maven Central Portal API
+ */
+tasks.register('publishToMavenCentral', Exec) {
+    group 'publishing'
+    dependsOn(generateMavenCentralBundle)
+    executable "curl"
+    standardOutput = new ByteArrayOutputStream()
+    doFirst {
+        args = [
+            "--request", "POST",
+            "--header", "Authorization: Bearer $sonatypeToken",
+            "--form", "bundle=@${generateMavenCentralBundle.outputs.files.first()}",
+            "https://central.sonatype.com/api/v1/publisher/upload?name=${project.group}.${project.name}:${project.version}&publishingType=USER_MANAGED"
+        ]
+    }
+    doLast {
+        println standardOutput.toString()
+    }
+}
+
+/**
+ * Generates GPG signatures for all files
+ */
+tasks.register('signFiles', Sign) {
+    group 'signatures'
+    dependsOn jar, sourcesJar, javadocJar, generatePomFileForMavenJavaPublication
+    inputs.file project.file('build/publications/mavenJava/pom-default.xml')
+    inputs.files jar.outputs.files.singleFile, sourcesJar.outputs.files.singleFile, javadocJar.outputs.files.singleFile
+    inputs.files.each {sign it }
+}
+
+/**
+ * Remove extra Version field in GPG signatures generated by GNU GPG
+ */
+tasks.withType(Sign).configureEach {
+    onlyIf { hasSignatureKey }
+    doLast {
+        signatureFiles.each {file ->
+            file.text = file.readLines().findAll { !it.startsWith("Version")}.join("\n")
+        }
+    }
+}

src/main/java/com/devsoap/json/JsonArrayAssert.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import jakarta.json.JsonArray;
@@ -6,6 +24,7 @@ import org.assertj.core.api.AbstractListAssert;
 
 import java.util.List;
 
+
 public class JsonArrayAssert<VALUE_TYPE extends JsonValue> extends AbstractListAssert<JsonArrayAssert<VALUE_TYPE>,
         List<VALUE_TYPE>,
         VALUE_TYPE, JsonValueAssert<VALUE_TYPE>> {

src/main/java/com/devsoap/json/JsonAssert.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import jakarta.json.*;

src/main/java/com/devsoap/json/JsonValueAssert.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import jakarta.json.JsonArray;

src/test/java/com/devsoap/json/ArrayTraversalAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;

src/test/java/com/devsoap/json/DoubleAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;

src/test/java/com/devsoap/json/FieldTraversalAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;

src/test/java/com/devsoap/json/IntegerAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;

src/test/java/com/devsoap/json/LongAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;

src/test/java/com/devsoap/json/StringAssertionTest.java

@@ -1,3 +1,21 @@
+/*
+ *  Copyright (c) 2024 John Ahlroos
+ *
+ *  Creative Commons Attribution-NoDerivatives 4.0 International Public License
+ *
+ *  By exercising the Licensed Rights (defined below), You accept and agree
+ *  to be bound by the terms and conditions of this Creative Commons
+ *  Attribution-NoDerivatives 4.0 International Public License ("Public
+ *  License"). To the extent this Public License may be interpreted as a
+ *  contract, You are granted the Licensed Rights in consideration of Your
+ *  acceptance of these terms and conditions, and the Licensor grants You
+ *  such rights in consideration of benefits the Licensor receives from
+ *  making the Licensed Material available under these terms and
+ *  conditions.
+ *
+ *  Refer to LICENSE file or https://creativecommons.org/licenses/by-nd/4.0 for full license.
+ *
+ */
 package com.devsoap.json;
 
 import org.junit.jupiter.api.Test;