jianguotian opened a new pull request, #71: URL: https://github.com/apache/paimon-mosaic/pull/71
## Purpose Move Java RC signing and Nexus staging deployment from GitHub Actions to the Release Manager's machine, while binding the local deployment to the exact RC tag and successful Release workflow run. ## Changes - Keep Java signing keys and Nexus credentials out of GitHub Actions; CI packages and uploads the Java/native artifacts for local staging. - Harden argument parsing so a missing option value cannot consume `--dry-run` and trigger a real deployment. - Require the release version, RC number, tag, workflow ref, workflow commit, and local checkout to match exactly. - Reject tracked, untracked, and ignored Java package inputs that could enter release JARs; normalize relative Maven settings paths. - Support macOS Bash 3.2 and run the regression suite on both Ubuntu and macOS. - Validate the exact main, sources, javadoc, and native-containing JARs during the same `mvn clean deploy` lifecycle that uploads them. - Update the official release guide for the local Java staging procedure. - Fix the current Rust Clippy `byte_char_slices` failure so the PR can become green. ## Tests - `bash tools/tests/deploy_java_staging_test.sh` (7 safety regressions) - The same suite with GNU Bash 3.2 - `mvn clean verify -Prelease -Dgpg.skip=true -DskipTests -DstagingValidationScript=...` on JDK 8 - `cargo +1.97.1 fmt --all -- --check` - `cargo +1.97.1 clippy --all-targets --workspace -- -D warnings` - Parsed all workflow YAML and the release HTML - `git diff --check` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
