Remove attach-qar-maven-plugin Was: checkstyle, pmd and cpd files not signed

mam-dev / foss-parent

Parent POM for 1-and-1 open source projects using Maven.

http://1and1.github.io/foss-parent/github-report.html

Apache License 2.0

10 stars 4 forks source link

Remove attach-qar-maven-plugin Was: checkstyle, pmd and cpd files not signed #57

Closed mlhartme closed 10 years ago

mlhartme commented 10 years ago

I tried to deploy sushi with foss-parent 1.4.7, but Sonatype refused to close the staging repository: some artifacts attached by automatic tests were not signed.

mfriedenhagen commented 10 years ago

Hm, the attach-qar-maven-plugin should run before the maven-gpg-plugin, could you link a gist to the logfile output of your run?

mlhartme commented 10 years ago

Here's your sample output: https://gist.github.com/mlhartme/27320dca55ab7e56bf86 (from releasing https://github.com/mlhartme/maven-application-plugin)

mfriedenhagen commented 10 years ago

Now I see. attach-qar:attach runs during phase install, but gpg:sign runs during verify :-). attach-qar:attach is used internally, we do not sign releases now.