Infra: setup token-based publishing

autonomousapps / dependency-analysis-gradle-plugin

Gradle plugin for JVM projects written in Java, Kotlin, Groovy, or Scala; and Android projects written in Java or Kotlin. Provides advice for managing dependencies and other applied plugins

Apache License 2.0

1.67k stars 115 forks source link

Infra: setup token-based publishing #1113

Open autonomousapps opened 5 months ago

autonomousapps commented 5 months ago

https://central.sonatype.org/news/20240109_issues_sonatype_org_deprecation/#support-requests

Authenticating to OSSRH⚓︎ Currently, we offer both token authentication and username/password authentication to OSSRH. Using tokens for publishing is better for security and therefore will be the only supported method for publishing to OSSRH in the future. If you are currently using your username/password to authenticate, please set up a token on the OSSRH server you use for publishing.