From edec52e43f614fe9abb7a742729f937de36b0cd0 Mon Sep 17 00:00:00 2001
From: Mark Paluch <mark.paluch@broadcom.com>
Date: Tue, 6 Feb 2024 10:32:45 +0100
Subject: [PATCH] Move GPG signing into release profile.

Closes #201
---
 bom/pom.xml | 60 ++++++++++++++++++++++++++---------------------------
 1 file changed, 30 insertions(+), 30 deletions(-)

diff --git a/bom/pom.xml b/bom/pom.xml
index 25ec071..bc60052 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -288,30 +288,6 @@
 				<pluginManagement>
 					<plugins>
 
-						<!-- Sign JARs -->
-
-						<plugin>
-							<groupId>org.apache.maven.plugins</groupId>
-							<artifactId>maven-gpg-plugin</artifactId>
-							<version>3.0.1</version>
-							<executions>
-								<execution>
-									<id>sign-artifacts</id>
-									<phase>verify</phase>
-									<goals>
-										<goal>sign</goal>
-									</goals>
-									<configuration>
-										<gpgArguments>
-											<arg>--pinentry-mode</arg>
-											<arg>loopback</arg>
-											<arg>--no-tty</arg>
-										</gpgArguments>
-									</configuration>
-								</execution>
-							</executions>
-						</plugin>
-
 						<!-- Deploy to Sonatype OSS Nexus -->
 
 						<plugin>
@@ -332,11 +308,6 @@
 
 				<plugins>
 
-					<plugin>
-						<groupId>org.apache.maven.plugins</groupId>
-						<artifactId>maven-gpg-plugin</artifactId>
-					</plugin>
-
 					<plugin>
 						<groupId>org.sonatype.plugins</groupId>
 						<artifactId>nexus-staging-maven-plugin</artifactId>
@@ -360,7 +331,31 @@
 			<build>
 				<pluginManagement>
 					<plugins>
-						<!-- Make sure we build on Java 8 with only release dependencies -->
+
+						<!-- Sign JARs -->
+						<plugin>
+							<groupId>org.apache.maven.plugins</groupId>
+							<artifactId>maven-gpg-plugin</artifactId>
+							<version>3.0.1</version>
+							<executions>
+								<execution>
+									<id>sign-artifacts</id>
+									<phase>verify</phase>
+									<goals>
+										<goal>sign</goal>
+									</goals>
+									<configuration>
+										<gpgArguments>
+											<arg>--pinentry-mode</arg>
+											<arg>loopback</arg>
+											<arg>--no-tty</arg>
+										</gpgArguments>
+									</configuration>
+								</execution>
+							</executions>
+						</plugin>
+
+						<!-- Make sure we build on Java 17 with only release dependencies -->
 
 						<plugin>
 							<groupId>org.apache.maven.plugins</groupId>
@@ -400,6 +395,11 @@
 
 				<plugins>
 
+					<plugin>
+						<groupId>org.apache.maven.plugins</groupId>
+						<artifactId>maven-gpg-plugin</artifactId>
+					</plugin>
+
 					<plugin>
 						<groupId>org.apache.maven.plugins</groupId>
 						<artifactId>maven-enforcer-plugin</artifactId>