From 87bc7e0b2f75f30785877129dcc5edf95ec77bb9 Mon Sep 17 00:00:00 2001
From: Rob Moffat <rob@kite9.com>
Date: Wed, 25 Mar 2026 10:37:16 +0000
Subject: [PATCH] Updated pom for GPG signing

---
 pom.xml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index c12a29db..2dc37913 100644
--- a/pom.xml
+++ b/pom.xml
@@ -161,7 +161,7 @@
 					<plugin>
 						<groupId>org.apache.maven.plugins</groupId>
 						<artifactId>maven-gpg-plugin</artifactId>
-						<version>1.6</version>
+						<version>3.2.8</version>
 						<executions>
 							<execution>
 								<id>sign-artifacts</id>
@@ -172,7 +172,12 @@
 							</execution>
 						</executions>
 						<configuration>
-							<interactive>false</interactive>
+							<!-- CI: passphrase from env, not encrypted settings.xml (avoids settings-security.xml) -->
+							<passphraseEnvName>GPG_PASSPHRASE</passphraseEnvName>
+							<gpgArguments>
+								<arg>--pinentry-mode</arg>
+								<arg>loopback</arg>
+							</gpgArguments>
 						</configuration>
 					</plugin>
 				</plugins>