From bf09ff53052f13f5edf7c47465b9af1953128903 Mon Sep 17 00:00:00 2001
From: Jeronimo Ortiz <166400360+ortizjeronimo@users.noreply.github.com>
Date: Tue, 11 Nov 2025 11:41:20 +0100
Subject: [PATCH 1/4] removed distribution management section, added
 central-publishing-maven-plugin

---
 pom.xml | 25 ++++++-------------------
 1 file changed, 6 insertions(+), 19 deletions(-)

diff --git a/pom.xml b/pom.xml
index 343504a..4898ec4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,19 +43,6 @@
         <exec.mainClass>com.scanoss.cli.CommandLine</exec.mainClass>
     </properties>
 
-    <distributionManagement>
-        <snapshotRepository>
-            <id>ossrh</id>
-            <name>Maven Central Snapshot Repo</name>
-            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-        <repository>
-            <id>ossrh</id>
-            <name>Maven Central Staging Repo</name>
-            <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-        </repository>
-    </distributionManagement>
-
     <dependencies>
         <!-- Core compile dependencies -->
         <dependency>
@@ -258,14 +245,14 @@
                 </executions>
             </plugin>
             <plugin>
-                <groupId>org.sonatype.plugins</groupId>
-                <artifactId>nexus-staging-maven-plugin</artifactId>
-                <version>1.6.7</version>
+                <groupId>org.sonatype.central</groupId>
+                <artifactId>central-publishing-maven-plugin</artifactId>
+                <version>0.9.0</version>
                 <extensions>true</extensions>
                 <configuration>
-                    <serverId>ossrh</serverId>
-                    <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                    <autoReleaseAfterClose>true</autoReleaseAfterClose>
+                    <publishingServerId>central</publishingServerId>
+                    <autoPublish>true</autoPublish>
+                    <waitUntil>published</waitUntil>
                 </configuration>
             </plugin>
         </plugins>

From 211896ae56ca22eab8cefb1c143eda10cf3a7cd4 Mon Sep 17 00:00:00 2001
From: Jeronimo Ortiz <166400360+ortizjeronimo@users.noreply.github.com>
Date: Tue, 11 Nov 2025 11:44:34 +0100
Subject: [PATCH 2/4] changed server id from 'ossrh' to 'central'

---
 settings.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/settings.xml b/settings.xml
index 7f3fc02..aab0a16 100644
--- a/settings.xml
+++ b/settings.xml
@@ -1,7 +1,7 @@
 <settings>
     <servers>
         <server>
-            <id>ossrh</id>
+            <id>central</id>
             <username>${env.OSSRH_USER_TOKEN}</username>
             <password>${env.OSSRH_PWD_TOKEN}</password>
         </server>

From 8c3fbdb8cf0fa2d492c0093a5fec1d09cf71a098 Mon Sep 17 00:00:00 2001
From: Jeronimo Ortiz <166400360+ortizjeronimo@users.noreply.github.com>
Date: Tue, 11 Nov 2025 11:55:49 +0100
Subject: [PATCH 3/4] explicit link to settings.xml passphrase

---
 pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pom.xml b/pom.xml
index 4898ec4..44e92f3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -235,6 +235,7 @@
                             <goal>sign</goal>
                         </goals>
                         <configuration>
+                            <passphraseServerId>gpg.passphrase</passphraseServerId>
                             <!-- Prevent gpg from using pinentry programs -->
                             <gpgArguments>
                                 <arg>--pinentry-mode</arg>

From 2ddb6d052e194c2c959c9996b1327785a2b4e155 Mon Sep 17 00:00:00 2001
From: Jeronimo Ortiz <166400360+ortizjeronimo@users.noreply.github.com>
Date: Tue, 11 Nov 2025 11:57:16 +0100
Subject: [PATCH 4/4] moved from deprecated setup-java@v1.4.4 for publishing
 step

---
 .github/workflows/publish.yml | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7440603..1fd44da 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -34,14 +34,15 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Setup Java
-        uses: actions/setup-java@v1.4.4
+        uses: actions/setup-java@v4
         with:
+          distribution: temurin
           java-version: 11
-          server-id: ossrh
-          server-username: MAVEN_USERNAME
-          server-password: MAVEN_PASSWORD
+          server-id: central
+          server-username: ${{ secrets.OSSRH_USER_TOKEN }}
+          server-password: ${{ secrets.OSSRH_PWD_TOKEN }}
           gpg-private-key: ${{ secrets.GPG_SIGNING_KEY }}
-          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: ${{ secrets.GPG_PWD }}
 
       - name: Package
         run: |
@@ -51,10 +52,6 @@ jobs:
         if: github.ref_type == 'tag' && startsWith(github.ref_name, 'v')
         run: |
           mvn --no-transfer-progress --batch-mode deploy
-        env:
-          MAVEN_USERNAME: ${{ secrets.OSSRH_USER_TOKEN }}
-          MAVEN_PASSWORD: ${{ secrets.OSSRH_PWD_TOKEN }}
-          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PWD }}
 
       - name: Cache Jars
         uses: actions/upload-artifact@v4