[CS-36689] GPG signing test

Author: ishaileshmishra

.github/workflows/publish.yml

@@ -17,7 +17,7 @@ jobs:
           distribution: 'adopt'
           server-id: ossrh
           server-username: ${{ secrets.OSSRH_USERNAME }}
-          server-password: ${{ secrets.OSSRH_TOKEN }}
+          server-password: ${{ secrets.OSSRH_PASSWORD }}
 
       - name: Configure settings.xml
         run: |
@@ -28,26 +28,13 @@ jobs:
         run: mvn --batch-mode deploy
         env:
           MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-          MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
       - name: Set up Java for publishing to GitHub Packages
         uses: actions/setup-java@v3
         with:
           java-version: '11'
           distribution: 'adopt'
 
-#      - name: Import GPG private key
-      #        run: |
-      #          echo "$GPG_PRIVATE_KEY" > private.key
-      #          gpg --batch --import private.key
-
-#      - name: Maven deploy with GPG signing
-#        run: |
-#          mvn clean deploy -P release
-#        env:
-#          DEPLOY_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-#          DEPLOY_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
-#          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
-
       - name: Publish to GitHub Packages
         run: mvn --batch-mode deploy
         env:

pom.xml

@@ -235,20 +235,20 @@
                 <version>${maven-site-plugin.version}</version>
             </plugin>
 
-<!--            <plugin>-->
-<!--                <groupId>org.apache.maven.plugins</groupId>-->
-<!--                <artifactId>maven-gpg-plugin</artifactId>-->
-<!--                <version>${maven-gpg-plugin.version}</version>-->
-<!--                <executions>-->
-<!--                    <execution>-->
-<!--                        <id>sign-artifacts</id>-->
-<!--                        <phase>verify</phase>-->
-<!--                        <goals>-->
-<!--                            <goal>sign</goal>-->
-<!--                        </goals>-->
-<!--                    </execution>-->
-<!--                </executions>-->
-<!--            </plugin>-->
+            <!--            <plugin>-->
+            <!--                <groupId>org.apache.maven.plugins</groupId>-->
+            <!--                <artifactId>maven-gpg-plugin</artifactId>-->
+            <!--                <version>${maven-gpg-plugin.version}</version>-->
+            <!--                <executions>-->
+            <!--                    <execution>-->
+            <!--                        <id>sign-artifacts</id>-->
+            <!--                        <phase>verify</phase>-->
+            <!--                        <goals>-->
+            <!--                            <goal>sign</goal>-->
+            <!--                        </goals>-->
+            <!--                    </execution>-->
+            <!--                </executions>-->
+            <!--            </plugin>-->
 
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
@@ -261,11 +261,6 @@
                     <showDeprecation>true</showDeprecation>
                     <showWarnings>true</showWarnings>
                     <compilerArgs>
-                        <!-- We turn off:
-                            - `serial` because we don't use Java serialization
-                              (and all it does is stupidly complain about the serialVersionUID)
-                            - `processing` because it complains about every annotation
-                        -->
                         <arg>-Xlint:all,-serial,-processing</arg>
                     </compilerArgs>
                 </configuration>