On 20 Oct 2011, at 17:52, Sanne Grinovero wrote:
right, sounds a reasonable requirement. Any suggestion to automate
this check?
Use regexp and parse the transformed-for-release (i.e. with their own versions swapped
out) for SNAPSHOT? That's what I've used before and it works.
Since we use scripts for the release anyway, it shouldn't be hard
to
add an extra step and sign the artifacts too: that's appreciated by
some.
Yes. Here is my guide to using signing -
http://seamframework.org/Weld/WeldReleasesGettingStarted#H-PublishingBuil... - and
here is the plugin config I used in the release profile
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-gpg-plugin</artifactId>
<configuration>
<passphrase>${gpg.passphrase}</passphrase>
<useAgent>${gpg.useAgent}</useAgent>
</configuration>
<executions>
<execution>
<id>sign-artifacts</id>
<phase>verify</phase>
<goals>
<goal>sign</goal>
</goals>
</execution>
</executions>
</plugin>