ICU-23148 Migrate ICU4J publishing from Legacy OSSRH to Central Portal

Author: mihnita

.github/workflows/release-icu4j-maven.yml

@@ -55,7 +55,7 @@ jobs:
       with:
         java-version: '11'
         distribution: 'temurin'
-        server-id: icu4j-maven-repo # Value of the distributionManagement/repository/id field of the pom.xml
+        server-id: central # Value of the distributionManagement/repository/id field of the pom.xml
         server-username: MAVEN_USERNAME # env variable for username in deploy
         server-password: MAVEN_CENTRAL_TOKEN # env variable for token in deploy
         gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} # Value of the GPG private key to import

docs/devsetup/java/ant/index.md

@@ -243,4 +243,4 @@ ICU4J plugin test - Note: This is currently broken
 
 ## Building ICU4J Release Files
 
-See [Release Build](../../../processes/release/tasks/release-build.md)
+See [Release Build](../../../processes/release/tasks/publish/release.md)

docs/processes/release/tasks/NexusRepoMan.png

@@ -234,13 +234,13 @@ Look at previous releases for an example.
 
 **Post 76.1 see [Publish - Version 76.1](release.md)**
 
-Follow instructions here: [Building ICU4J Release Files](../release-build.md)
+Follow instructions here: [Building ICU4J Release Files](release.md)
 
 ### C source/binary:
 
 **Post 76.1 see [Publish - Version 76.1](release.md)**
 
-<span style="background:yellow">***WORK IN PROGRESS***</a>
+<span style="background:yellow">***WORK IN PROGRESS***</span>
 
 #### Source and Linux Binaries:
 

docs/processes/release/tasks/publish/index.md

@@ -73,10 +73,35 @@ Here you should use the release tag.
      the promotion to Maven Central.
    * The unified Java documentation, (`icu4j-76.1-fulljavadoc.jar`) \
      **WARNING:** this is also the one to be published (unpacked) for web access
+   * Make sure to set the proper parameters:
+     * **Branch:** the branch prepared for release, for example `maint/maint-77`
+     * **Run the tests:** checked (default)
+     * **Deploy to Maven Central:** check (unchecked by default), if you are ready
+       for a real deployment and not doing just a sanity check
+     * **Release tag to upload to:** should be the GitHub draft release prepared
+       in a previous BRS step.
 
 1. **Release - Create checksums and GPG sign** (`release-check-sign.yml`) \
    THIS SHOULD BE THE LAST ACTION YOU RUN. \
    After all the artifacts from the previous steps are posted to the release. \
    The action will download all the artifacts from release,
    create checksum files (`SHASUM512.txt` and `*.md5`),
    and digital signature files (`*.asc`)
+
+1. **Login to Sonatype, sanity check, and approve** \
+  The previous step stages the Maven artifacts to Sonatype, but does
+  not automatically push them to Maven Central. \
+  It can be enabled, but we chose no to enable it by default so that a human can do a last sanity check. \
+  So someone must login to Sonatype, check that everything looks fine, and approve. \
+  <span style="color:red"><b>Note:</b> only someone with a Sonatype account
+  that was authorized for `com.ibm.icu` can approve. \
+  You can find the list of people with such access in the team shared folder.</span> \
+  To do that:
+    * log on to the [Sonatype Central Portal -- Namespaces](https://central.sonatype.com/publishing/namespaces).
+    * Select the "Deployments" tab.
+    * Check the files staged there, compare to a previous public release in Maven Central
+    (for example [ICU4J 77.1](https://repo1.maven.org/maven2/com/ibm/icu/icu4j/77.1/)
+    and [ICU4J Charset 77.1](https://repo1.maven.org/maven2/com/ibm/icu/icu4j-charset/77.1/)) \
+    For now sanity check is probably: make sure there are no errors / warnings, make sure the new staged files match the ones in the 2 links above.
+    * Once you confirm the contents, approve it.
+    * <span style="color:red"><b>TODO: update this doc with screenshot(s) once we have a release staged.</b><span>

docs/processes/release/tasks/publish/release.md

@@ -88,6 +88,13 @@
           <skip>false</skip>
         </configuration>
       </plugin>
+      <plugin>
+        <groupId>org.sonatype.central</groupId>
+        <artifactId>central-publishing-maven-plugin</artifactId>
+        <configuration>
+          <skipPublishing>false</skipPublishing>
+        </configuration>
+      </plugin>
     </plugins>
   </build>
 

docs/processes/release/tasks/release-build.md

@@ -132,6 +132,13 @@
           <skip>false</skip>
         </configuration>
       </plugin>
+      <plugin>
+        <groupId>org.sonatype.central</groupId>
+        <artifactId>central-publishing-maven-plugin</artifactId>
+        <configuration>
+          <skipPublishing>false</skipPublishing>
+        </configuration>
+      </plugin>
     </plugins>
   </build>
 

icu4j/main/charset/pom.xml

@@ -50,9 +50,9 @@
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
     <maven.compiler.release>11</maven.compiler.release>
 
-    <maven-central-repo-url>https://oss.sonatype.org</maven-central-repo-url>
-    <maven-central-releases-repo-url>${maven-central-repo-url}/service/local/staging/deploy/maven2</maven-central-releases-repo-url>
-    <maven-central-snapshots-repo-url>${maven-central-repo-url}/content/repositories/snapshots</maven-central-snapshots-repo-url>
+    <maven-central-repo-url>https://central.sonatype.com</maven-central-repo-url>
+    <maven-central-releases-repo-url>${maven-central-repo-url}</maven-central-releases-repo-url>
+    <maven-central-snapshots-repo-url>${maven-central-repo-url}/repository/maven-snapshots/</maven-central-snapshots-repo-url>
 
     <!-- This is the folder where we gather the files to be posted in the Github Release-->
     <release.directory>${project.build.directory}/release_directory</release.directory>
@@ -178,12 +178,12 @@
 
   <distributionManagement>
     <repository>
-      <id>icu4j-maven-repo</id>
+      <id>central</id>
       <name>ICU4J Central Repository</name>
       <url>${maven-central-releases-repo-url}</url>
     </repository>
     <snapshotRepository>
-      <id>icu4j-maven-repo</id>
+      <id>central</id>
       <name>ICU4J Central Development Repository</name>
       <url>${maven-central-snapshots-repo-url}</url>
     </snapshotRepository>
@@ -236,6 +236,16 @@
             <skip>true</skip>
           </configuration>
         </plugin>
+        <plugin>
+          <!-- https://central.sonatype.org/publish/publish-portal-maven/ -->
+          <groupId>org.sonatype.central</groupId>
+          <artifactId>central-publishing-maven-plugin</artifactId>
+          <version>0.8.0</version>
+          <extensions>true</extensions>
+          <configuration>
+            <checksums>required</checksums>
+          </configuration>
+        </plugin>
         <plugin>
           <artifactId>maven-site-plugin</artifactId>
           <version>4.0.0-M16</version>