Allow Continuous Integration to sign artifacts on its own.

Release process now relies on Orekit Nexus repository.

Allow Continuous Integration to sign artifacts on its own.

Author: BryanCazabonne

.CI/maven-settings.xml

@@ -1,6 +1,14 @@
-<settings xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-          xmlns="http://maven.apache.org/SETTINGS/1.0.0"
-          xsi:schemalocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd">
+<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
+          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
+    <mirrors>
+        <mirror>
+            <id>Nexus-Orekit</id>
+            <name>Maven Repository Manager</name>
+            <url>https://packages.orekit.org/repository/maven-public/</url>
+            <mirrorOf>*</mirrorOf>
+        </mirror>
+    </mirrors>
     <servers>
         <server>
             <id>ci-releases</id>
@@ -13,4 +21,25 @@
             <password>${env.NEXUS_PASSWORD}</password>
         </server>
     </servers>
-</settings>
+    <profiles>
+        <profile>
+            <activation>
+                <activeByDefault>true</activeByDefault>
+            </activation>
+            <repositories>
+                <repository>
+                    <id>Nexus-Orekit</id>
+                    <name>Nexus Public Repository</name>
+                    <url>https://packages.orekit.org/repository/maven-public/</url>
+                    <releases>
+                        <enabled>true</enabled>
+                    </releases>
+                    <snapshots>
+                        <enabled>true</enabled>
+                        <updatePolicy>always</updatePolicy>
+                    </snapshots>
+                </repository>
+            </repositories>
+        </profile>
+    </profiles>
+</settings>

.github/workflows/maven.yml

@@ -31,7 +31,9 @@ jobs:
         SONARQUBE_HOST_URL: ${{ vars.SONARQUBE_HOST_URL }}
     - name: Deployment
       if: ( github.repository == 'Hipparchus-Math/hipparchus' ) && ( ( github.ref == 'refs/heads/main' ) || startsWith( github.ref, 'refs/heads/release-' ) )
-      run: mvn -B -U -f pom.xml -s .CI/maven-settings.xml deploy -Pci-deploy -DskipTests=true
+      run: mvn -B -U -f pom.xml -s .CI/maven-settings.xml deploy -DskipTests=true -Prelease,ci-deploy
       env:
         NEXUS_USERNAME: ${{ secrets.NEXUS_USERNAME }}
         NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+        MAVEN_GPG_KEY: ${{ secrets.MAVEN_GPG_KEY }}
+        MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}

hipparchus-parent/pom.xml

@@ -557,7 +557,6 @@
     <hipparchus.maven-surefire-plugin.version>3.5.2</hipparchus.maven-surefire-plugin.version>
     <hipparchus.maven-surefire-report-plugin.version>3.5.2</hipparchus.maven-surefire-report-plugin.version>
     <hipparchus.maven-enforcer-plugin.version>3.5.0</hipparchus.maven-enforcer-plugin.version>
-    <hipparchus.nexus-staging-maven-plugin.version>1.7.0</hipparchus.nexus-staging-maven-plugin.version>
     <hipparchus.maven-gpg-plugin.version>3.2.7</hipparchus.maven-gpg-plugin.version>
     <hipparchus.maven-install-plugin.version>3.1.4</hipparchus.maven-install-plugin.version>
     <hipparchus.apache-rat-plugin.version>0.16.1</hipparchus.apache-rat-plugin.version>
@@ -1031,16 +1030,6 @@
     </profile>
     <profile>
       <id>release</id>
-      <distributionManagement>
-        <snapshotRepository>
-          <id>ossrh</id>
-          <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-        <repository>
-          <id>ossrh</id>
-          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-        </repository>
-      </distributionManagement>
       <build>
         <plugins>
           <plugin>
@@ -1069,25 +1058,13 @@
               </execution>
             </executions>
           </plugin>
-          <plugin>
-            <groupId>org.sonatype.plugins</groupId>
-            <artifactId>nexus-staging-maven-plugin</artifactId>
-            <version>${hipparchus.nexus-staging-maven-plugin.version}</version>
-            <extensions>true</extensions>
-            <configuration>
-              <serverId>ossrh</serverId>
-              <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-              <autoReleaseAfterClose>false</autoReleaseAfterClose>
-            </configuration>
-          </plugin>
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
             <version>${hipparchus.maven-gpg-plugin.version}</version>
             <configuration>
-              <gpgArguments>
-                <arg>--digest-algo=SHA512</arg>
-              </gpgArguments>
+              <signer>bc</signer>
+              <useAgent>false</useAgent>
             </configuration>
             <executions>
               <execution>