Skip to content

add distribution of libraries via GitHub Packages mvn repo#1041

Merged
eschultink merged 2 commits intorc-v0.5.12from
s211-distribute-via-gh-mvn-repo
Nov 7, 2025
Merged

add distribution of libraries via GitHub Packages mvn repo#1041
eschultink merged 2 commits intorc-v0.5.12from
s211-distribute-via-gh-mvn-repo

Conversation

@eschultink
Copy link
Member

@eschultink eschultink commented Oct 31, 2025

Features

  • add various mvn config to poms, to support deploying as a mvn pkg to GitHub Packages
  • add this as a step in release tooling
  • add docs on consumtion

Change implications

  • dependencies added/changed? yes (explain) - mvn plugins
  • something important to note in future release notes? no

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds support for distributing Java libraries via GitHub Packages Maven repository. The changes enable automated publishing of Maven artifacts during releases and provide documentation for consuming these packages.

Key changes:

  • Added Maven deployment configuration to publish gateway-core and psoxy-core artifacts to GitHub Packages
  • Integrated Maven artifact publishing into the release script with authentication requirements and error handling
  • Created comprehensive documentation for both publishers and consumers of the Maven packages

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
tools/release/publish.sh Added automated Maven deployment step to release process with authentication checks
java/pom.xml Added GitHub Packages distribution management and Maven plugins for generating source/javadoc JARs
java/impl/pom.xml Configured impl modules to skip deployment (environment-specific, not for public distribution)
docs/development/releases.md Documented Maven artifact publishing requirements and manual fallback process
docs/development/maven-artifacts.md Created comprehensive guide for consuming Maven artifacts from GitHub Packages
docs/development/README.md Added Maven artifacts documentation to the development docs index

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.


### Maven Configuration

#### 1. Configure Authentication
Copy link

Copilot AI Oct 31, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Corrected 'consumtion' to 'consumption' in PR description metadata.

Copilot uses AI. Check for mistakes.
@eschultink eschultink merged commit c393273 into rc-v0.5.12 Nov 7, 2025
51 of 53 checks passed
@eschultink eschultink deleted the s211-distribute-via-gh-mvn-repo branch November 7, 2025 23:20
eschultink added a commit that referenced this pull request Nov 12, 2025
* Bump org.apache.httpcomponents.client5:httpclient5 in /java/gateway-core

Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.4.1 to 5.4.3.
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.1...rel/v5.4.3)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.4.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* prep v0.5.12

* Salesforce rules refresh (#1039)

* Update rules

* Support example with POST

* bump many dependencies (#1038)

* apache commons codec to 1.19.0

* more dep updates

* webhook collector auth perf (#1036)

* add logic to keep lambdas warm

* fix style

* init public keys in mem for webhook collectors on start-up

* aws replay tool (#1034)

* aws replace tool

* add documentation

* webhook collector output prefix support  (#1035)

* improve webhook collector mode configuration

* support webhook output prefix

* fix style

* fix path stuff

* fix missed rename

* fix various test issues

* gmail empty header fix (#1040)

* deal with empty header case more correctly; that's quite clearly a bug

* add test of empty CC case

* GCP VPC doc improvements (#1042)

* improve GCP vpc docs + conditions

* fix style, unrelated

* improve error feedback on network connectivity issues

* doc that GCP VPC needs external connectivity via router/nat for non-google sources

* move validation up to dop

* try to skip compile in tests

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix some references to role constants (#1043)

* config to deploy packages as mvn libs via GitHub Packages (#1041)

* improve OAuth token refresh (#1037)

* interface to secret store to get multiple versions of things

* refactor how token refreshin works, so potentially more proactive / better re-use

* pick most recent token based on expirationDate

* cr feedback

* fix refactor

* remove stray bracket

* Update java/core/src/main/java/co/worklytics/psoxy/gateway/impl/oauth/OAuthRefreshTokenSourceAuthStrategy.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update java/core/src/main/java/co/worklytics/psoxy/gateway/impl/CompositeConfigService.java

Co-authored-by: aperez-worklytics <75276364+aperez-worklytics@users.noreply.github.com>

* drop sort on lastAccessDate; only date-level granularity, so why bother

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: aperez-worklytics <75276364+aperez-worklytics@users.noreply.github.com>

* more psoxy constants (#1044)

* expose more outputs relevant to gcp-hosted deployments

* gcp min perms to host

* expose gcp network roles, for completenes

* doc gcp vpc roles

* doc that Project IAM Admin is required

* fix docs

* Update infra/modules/psoxy-constants/main.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update infra/modules/psoxy-constants/outputs.tf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update docs/gcp/vpc.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* prep v0.5.12 (#1046)

* fix bad comment

* try to make sbom stuff more robust

* drop mvn plugins that are problematic, see to cause build errors

* use reactor build

* sboms

* fix sbom generation

* update package-lock in psoxy-test

* fix gcp release artifact script

* prompt user if gcp artifact has already been published

* prompt user if aws artifact has already been published

* warn if we're NOT running in the expected place

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: aperez-worklytics <75276364+aperez-worklytics@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants