Skip to content

Fix/align deps and central portal publish#10

Merged
ake2l merged 2 commits into
developmentfrom
fix/align-deps-and-central-portal-publish
Jun 25, 2026
Merged

Fix/align deps and central portal publish#10
ake2l merged 2 commits into
developmentfrom
fix/align-deps-and-central-portal-publish

Conversation

@ake2l

@ake2l ake2l commented Jun 25, 2026

Copy link
Copy Markdown
Member

No description provided.

ake2l added 2 commits June 25, 2026 08:53
…cessNodes

postProcessNodes made a single pass over the incompletes list. Initializing an
INITIALIZABLE node fires providersChanged() on its clients, which can flip an
already-visited PARTIALLY_INITIALIZED node (whose last blocking optional provider
was just initialized) to INITIALIZABLE. The iterator had already passed it, so it
was stranded and the run failed with "Incomplete nodes left", depending on the
order incompletes were visited -- which is why it only surfaced on larger schemas.

Wrap the existing pass in a do/while that repeats until a full pass removes
nothing. Terminates (size is bounded below; each looping pass removes >= 1).

Adds a deterministic regression test (a web of required+optional cycles, the
shape that turns up modelling a complex database schema) that strands t8 on the
old single-pass code and resolves completely with the fix.
OSSRH (oss.sonatype.org) shut down 2025-06-30, breaking the release deploy, and
the publish config had drifted from rapiddweller-benerator-ce. Mirror the fixes
already landed on benerator development:

- Replace nexus-staging-maven-plugin with central-publishing-maven-plugin 0.11.0
  (autoPublish), drop the dead oss.sonatype.org snapshot distributionManagement
  (the plugin defaults to the Portal snapshots repo), and repoint the snapshot
  resolution repo to the Portal snapshots URL.
- Rename settings.xml server id ossrh -> central for the Portal user token (the
  OSSRH_USERTOKEN* secrets must now hold a Central Portal token).
- Pin maven-gpg-plugin to 3.1.0; 3.2.x ignores the settings.xml passphrase and
  breaks batch signing. Also makes the build reproducible.
- Replace the silent gpg --import with a step that fails fast and explains the
  cause when GPG_PRIVATE_KEY_ENCODED is empty or carries no secret key.
- Bump deprecated GitHub Actions off Node 20: checkout/cache v2->v5,
  upload-artifact v2->v6, download-artifact v2->v7.

Align shared dependency versions with benerator: slf4j 1.7.32 -> 1.7.36,
log4j 2.17.0 -> 2.25.4.
@ake2l
ake2l merged commit a50661b into development Jun 25, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant