From 1b07d4ed6220f7b39ee68c4f6ab80a75d7f445e2 Mon Sep 17 00:00:00 2001
From: Rob Moffat <rob@kite9.com>
Date: Wed, 25 Mar 2026 10:50:59 +0000
Subject: [PATCH 1/2] Using publishing plugin

---
 .github/workflows/java-release.yml | 14 +++++++++++++-
 pom.xml                            | 18 ++++++++++++------
 2 files changed, 25 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/java-release.yml b/.github/workflows/java-release.yml
index 32575af9..6fbd4450 100644
--- a/.github/workflows/java-release.yml
+++ b/.github/workflows/java-release.yml
@@ -51,4 +51,16 @@ jobs:
               env:
                   MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
                   MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
-                  GPG_PASSPHRASE: ${{ secrets.CI_GPG_PASSPHRASE }}
\ No newline at end of file
+                  GPG_PASSPHRASE: ${{ secrets.CI_GPG_PASSPHRASE }}
+
+            # maven-deploy only PUTs files; this hands the staging repo to the Central Portal (same runner IP).
+            # Namespace must match https://central.sonatype.com/publishing/namespaces (often your Maven groupId).
+            - name: Finalize deployment (Central Portal)
+              env:
+                  MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+                  MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
+              run: |
+                TOKEN=$(printf '%s:%s' "$MAVEN_USERNAME" "$MAVEN_PASSWORD" | base64 -w0)
+                curl -sfS -X POST \
+                  -H "Authorization: Bearer ${TOKEN}" \
+                  "https://ossrh-staging-api.central.sonatype.com/manual/upload/defaultRepository/org.finos.springbot?publishing_type=user_managed"
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index 2dc37913..3580da4b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -180,6 +180,17 @@
 							</gpgArguments>
 						</configuration>
 					</plugin>
+					<plugin>
+						<groupId>org.sonatype.central</groupId>
+						<artifactId>central-publishing-maven-plugin</artifactId>
+						<version>0.7.0</version>
+						<extensions>true</extensions>
+						<configuration>
+								<publishingServerId>central</publishingServerId>
+								<autoPublish>true</autoPublish>
+								<waitUntil>published</waitUntil>
+						</configuration>
+					</plugin>
 				</plugins>
 			</build>
 		</profile>
@@ -248,10 +259,5 @@
 		</dependencies>
 	</dependencyManagement>
 
-	<distributionManagement>
-		<repository>
-			<id>nexus</id>
-			<url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-        </repository>
-	</distributionManagement>
+
 </project>

From a7df6dcf73157a839a2b18147725fac301e255ca Mon Sep 17 00:00:00 2001
From: Rob Moffat <rob@kite9.com>
Date: Wed, 25 Mar 2026 10:54:24 +0000
Subject: [PATCH 2/2] Using publishing plugin - remove extra step

---
 .github/workflows/java-release.yml | 12 ------------
 1 file changed, 12 deletions(-)

diff --git a/.github/workflows/java-release.yml b/.github/workflows/java-release.yml
index 6fbd4450..464527c9 100644
--- a/.github/workflows/java-release.yml
+++ b/.github/workflows/java-release.yml
@@ -52,15 +52,3 @@ jobs:
                   MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
                   MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
                   GPG_PASSPHRASE: ${{ secrets.CI_GPG_PASSPHRASE }}
-
-            # maven-deploy only PUTs files; this hands the staging repo to the Central Portal (same runner IP).
-            # Namespace must match https://central.sonatype.com/publishing/namespaces (often your Maven groupId).
-            - name: Finalize deployment (Central Portal)
-              env:
-                  MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-                  MAVEN_PASSWORD: ${{ secrets.OSSRH_TOKEN }}
-              run: |
-                TOKEN=$(printf '%s:%s' "$MAVEN_USERNAME" "$MAVEN_PASSWORD" | base64 -w0)
-                curl -sfS -X POST \
-                  -H "Authorization: Bearer ${TOKEN}" \
-                  "https://ossrh-staging-api.central.sonatype.com/manual/upload/defaultRepository/org.finos.springbot?publishing_type=user_managed"
\ No newline at end of file