Updated the configuration for version release

.github/workflows/tag-release.yml

@@ -1,4 +1,4 @@
-# Copyright © 2022 Cask Data, Inc.
+# Copyright © 2026 Cask Data, Inc.
 #  Licensed under the Apache License, Version 2.0 (the "License"); you may not
 #  use this file except in compliance with the License. You may obtain a copy of
 #  the License at
@@ -21,16 +21,6 @@ jobs:
     if: ${{ github.ref_type == 'tag' }}
     steps:
 
-      - name: Get Secrets from GCP Secret Manager
-        id: 'secrets'
-        uses: 'google-github-actions/get-secretmanager-secrets@v0'
-        with:
-          secrets: |-
-            CDAP_OSSRH_USERNAME:cdapio-github-builds/CDAP_OSSRH_USERNAME
-            CDAP_OSSRH_PASSWORD:cdapio-github-builds/CDAP_OSSRH_PASSWORD
-            CDAP_GPG_PASSPHRASE:cdapio-github-builds/CDAP_GPG_PASSPHRASE
-            CDAP_GPG_PRIVATE_KEY:cdapio-github-builds/CDAP_GPG_PRIVATE_KEY
-
       - name: Checkout Repository
         uses: actions/checkout@v4
         with:
@@ -44,25 +34,17 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-maven-${{ github.workflow }}
 
-      - name: Set up GPG conf
-        run: |
-          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
-          echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
-
-      - name: Import GPG key
-        run: |
-          echo "$GPG_PRIVATE_KEY" > private.key
-          gpg --import --batch private.key
-        env:
-          GPG_PRIVATE_KEY: ${{ steps.secrets.outputs.CDAP_GPG_PRIVATE_KEY }}
-
       - name: Run tests
         run: mvn clean test -fae -T 2 -B -V -DcloudBuild -Dmaven.wagon.http.retryHandler.count=5 -Dmaven.wagon.httpconnectionManager.ttlSeconds=30
 
-      - name: Publish to Maven Central
-        run: mvn clean -B -V -DskipTests deploy -P release -Dgpg.passphrase=$CDAP_GPG_PASSPHRASE -Dmaven.wagon.http.retryHandler.count=5 -Dmaven.wagon.httpconnectionManager.ttlSeconds=30
-        env:
-          CDAP_OSSRH_USERNAME: ${{ steps.secrets.outputs.CDAP_OSSRH_USERNAME }}
-          CDAP_OSSRH_PASSWORD: ${{ steps.secrets.outputs.CDAP_OSSRH_PASSWORD }}
-          CDAP_GPG_PASSPHRASE: ${{ steps.secrets.outputs.CDAP_GPG_PASSPHRASE }}
-          MAVEN_OPTS: '-Xmx3200m'
+      - name: Get Project Version
+        id: get_version
+        run: echo "VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)" >> $GITHUB_OUTPUT
+
+      - name: Submit Build to GCB
+        id: gcb
+        run: |
+          gcloud builds submit . \
+          --config=cloudbuild-release.yaml \
+          --project='cdapio-github-builds' \
+          --substitutions="_VERSION=${{ steps.get_version.outputs.VERSION }}"

cloudbuild-release.yaml

@@ -0,0 +1,102 @@
+# Copyright © 2026 Cask Data, Inc.
+#  Licensed under the Apache License, Version 2.0 (the "License"); you may not
+#  use this file except in compliance with the License. You may obtain a copy of
+#  the License at
+#  http://www.apache.org/licenses/LICENSE-2.0
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+#  License for the specific language governing permissions and limitations under
+#  the License.
+
+steps:
+    - name: 'gcr.io/cloud-builders/gcloud'
+      id: setup-gpg
+      entrypoint: 'bash'
+      secretEnv: ['GPG_KEY']
+      args:
+        - '-c'
+        - |
+          set -e
+          export GNUPGHOME=/workspace/.gnupg
+          mkdir -p $$GNUPGHOME
+          chmod 700 $$GNUPGHOME
+
+          echo "pinentry-mode loopback" >> $$GNUPGHOME/gpg.conf
+          echo "allow-loopback-pinentry" >> $$GNUPGHOME/gpg-agent.conf
+
+          echo "$$GPG_KEY" | gpg --batch --import
+          echo "GPG key imported into $$GNUPGHOME."
+
+    - name: 'gcr.io/cloud-builders/mvn:3.8-jdk-8'
+      id: maven-package
+      entrypoint: 'mvn'
+      args:
+        - 'deploy'
+        - '-B'
+        - '-V'
+        - '-DskipTests'
+        - "-Dgpg.passphrase=$${GPG_PASSPHRASE}"
+        - '-Pcommon-artifacts,version-release'
+        - '-DaltDeploymentRepository=local::default::file:///workspace/target'
+        - '-Dmaven.wagon.http.retryHandler.count=5'
+        - '-Dmaven.wagon.httpconnectionManager.ttlSeconds=30'
+      env:
+        - 'GNUPGHOME=/workspace/.gnupg'
+      secretEnv: [ 'GPG_PASSPHRASE' ]
+
+
+    - name: 'bash'
+      id: create-exit-gate-manifest
+      entrypoint: 'bash'
+      args:
+        - '-c'
+        - |
+            set -e
+            MANIFEST_FILE="/workspace/publish_manifest.textproto"
+            echo '# -*- protobuffer -*-' > "$${MANIFEST_FILE}"
+            echo '# proto-file: security/opensource/exit_gate_v1/onboarded/proto/publishing_manifest.proto' >> "$${MANIFEST_FILE}"
+            echo '# proto-message: PublishingManifest' >> "$${MANIFEST_FILE}"
+            echo '' >> "$${MANIFEST_FILE}"
+            echo 'publish_all: true' >> "$${MANIFEST_FILE}"
+            echo "Created manifest file: $${MANIFEST_FILE}"
+      waitFor: ['maven-package']
+
+    - name: 'gcr.io/cloud-builders/gsutil'
+      id: upload-exit-gate-manifest
+      entrypoint: 'bash'
+      args:
+        - '-c'
+        - |
+            set -e
+            GCS_MANIFEST_DIR="gs://oss-exit-gate-prod-projects-bucket/cloud-data-fusion/githubreleases/manifests/"
+            MANIFEST_FILE="/workspace/publish_manifest.textproto"
+            MANIFEST_FILENAME="release_${_VERSION}.textproto"
+            echo "Uploading manifest to $${GCS_MANIFEST_DIR}$${MANIFEST_FILENAME}"
+            gsutil cp "$${MANIFEST_FILE}" "$${GCS_MANIFEST_DIR}$${MANIFEST_FILENAME}"
+            echo "Manifest uploaded successfully."
+      waitFor: ['create-exit-gate-manifest']
+
+
+substitutions:
+  _VERSION: '0.25.0-SNAPSHOT'
+
+artifacts:
+  mavenArtifacts:
+    - repository: 'https://us-east1-maven.pkg.dev/komalyd-dev/my-test-maven-repo'
+      deployFolder: '/workspace/target/'
+      groupId: 'io.cdap.plugin'
+      artifactId: 'google-cloud'
+      version: '${_VERSION}'
+
+options:
+  requestedVerifyOption: VERIFIED
+  machineType: 'E2_HIGHCPU_32'
+
+
+availableSecrets:
+  secretManager:
+    - versionName: projects/cdapio-github-builds/secrets/CDAP_GPG_PRIVATE_KEY/versions/latest
+      env: 'GPG_KEY'
+    - versionName: projects/cdapio-github-builds/secrets/CDAP_GPG_PASSPHRASE/versions/latest
+      env: 'GPG_PASSPHRASE'

pom.xml

@@ -904,6 +904,13 @@
   </dependencies>
 
   <build>
+    <extensions>
+      <extension>
+        <groupId>com.google.cloud.artifactregistry</groupId>
+        <artifactId>artifactregistry-maven-wagon</artifactId>
+        <version>2.2.5</version>
+      </extension>
+    </extensions>
     <testSourceDirectory>${testSourceLocation}</testSourceDirectory>
     <plugins>
       <plugin>
@@ -1058,7 +1065,13 @@
   <!-- Profile for release. Includes signing of jars. -->
   <profiles>
     <profile>
-      <id>release</id>
+      <id>version-release</id>
+      <distributionManagement>
+        <repository>
+          <id>artifact-registry</id>
+          <url>artifactregistry://us-east1-maven.pkg.dev/komalyd-dev/my-test-maven-repo</url>
+        </repository>
+      </distributionManagement>
       <build>
         <plugins>
           <!-- Source JAR -->
@@ -1145,20 +1158,10 @@
               </execution>
             </executions>
           </plugin>
-          <plugin>
-            <groupId>org.sonatype.central</groupId>
-            <artifactId>central-publishing-maven-plugin</artifactId>
-            <version>0.8.0</version>
-            <extensions>true</extensions>
-            <configuration>
-              <publishingServerId>sonatype.release</publishingServerId>
-              <autoPublish>false</autoPublish>
-              <ignorePublishedComponents>true</ignorePublishedComponents>
-            </configuration>
-          </plugin>
-        </plugins>
-      </build>
-    </profile>
+      </plugins>
+    </build>
+  </profile>
+
     <profile>
       <id>cloudBuild</id>
       <activation>