Skip to content

NGSOK-1746 Publish Maven artifacts and release tarballs on release - #61

Merged
giggsoff merged 4 commits into
develop/4.4.0/3.5.4.5from
feature/3/NGSOK-1746
Sep 16, 2026
Merged

giggsoff merged 4 commits into
develop/4.4.0/3.5.4.5from
feature/3/NGSOK-1746

Conversation

@giggsoff

@giggsoff giggsoff commented Sep 2, 2026 •

Copy link
Copy Markdown
Collaborator

The 3.5.x counterpart of #43, with #62's changes already folded in: Maven artifacts deploy to GitHub Packages on the tag push, and the two distribution tarballs plus the PySpark sdist attach to the release, gated by a verify job that checks the tag sits on a release/** or develop/** branch, that CI passed for the commit, and that the tag matches the pom version. The profile list is the one recorded in the RELEASE file of v3.5.4.4-4.3.0-2.

The second commit ports the Linters job from the 4.2 line, which this branch never had, and fixes what it found: a missing Apache header on dev/ivysettings.xml, a dependency check that had been skipping itself since the branch went 2.13-only (its manifest was still a 2.12 one, now regenerated), and scalastyle and scalafmt violations in fork-added code.

A third job attaches the CycloneDX SBOM and its grype vulnerability report, the pair the kyuubi release workflow produces.

@giggsoff giggsoff self-assigned this Sep 2, 2026
@giggsoff
giggsoff force-pushed the feature/3/NGSOK-1746 branch 2 times, most recently from ac96fe8 to a076ea7 Compare September 3, 2026 06:37
@giggsoff
giggsoff marked this pull request as draft September 3, 2026 06:38
@giggsoff
giggsoff force-pushed the feature/3/NGSOK-1746 branch 2 times, most recently from bcf0880 to 4e496c1 Compare September 3, 2026 07:09
@giggsoff giggsoff changed the title Publish Maven artifacts and release tarballs on release NGSOK-1746 Publish Maven artifacts and release tarballs on release Sep 4, 2026
@giggsoff
giggsoff force-pushed the feature/3/NGSOK-1746 branch from 1fa8187 to 6231d80 Compare September 4, 2026 09:04
Deploys the reactor to the Arenadata GitHub Packages registry on the tag push
and attaches the two distributions and the PySpark sdist to the release, both
gated by a verify job that checks the tag's branch, CI status and pom version.
A further job attaches the CycloneDX SBOM and its grype vulnerability report,
as the kyuubi release workflow does. The deploy target shares the id of the
`arenadata` <repositories> entry, so one settings.xml server covers the reads
and the deploy alike.
Ports the lint job from the 4.2 line and fixes what it found: the missing
Apache header on dev/ivysettings.xml, a dependency check that skipped itself on
2.13 and had gone stale as a 2.12 manifest, and scalastyle and scalafmt
violations in fork-added code. The check also takes its guava and jetty version
regexes from the 4.2 line, since the old ones match neither 33.5.0-jre nor
9.4.58.1. dev/lint-scala also loses its -Pscala-2.12 override, which no longer
matches this 2.13-only branch.
@giggsoff
giggsoff force-pushed the feature/3/NGSOK-1746 branch from 6231d80 to 5be726e Compare September 15, 2026 15:25
@giggsoff
giggsoff marked this pull request as ready for review September 16, 2026 05:47
Signed-off-by: Petr Fedchenkov <giggsoff@gmail.com>
@giggsoff
giggsoff requested a review from werzerbb September 16, 2026 07:46
Signed-off-by: Petr Fedchenkov <giggsoff@gmail.com>
@giggsoff
giggsoff merged commit 617089c into develop/4.4.0/3.5.4.5 Sep 16, 2026
0 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants