Replace sbt-gpg with sbt-pgp

ci-signing/build.sbt

@@ -1 +1 @@
-addSbtPlugin("io.crashbox" % "sbt-gpg" % "0.2.1")
+addSbtPlugin("com.github.sbt" % "sbt-pgp" % "2.3.1")

ci-signing/src/main/scala/org/typelevel/sbt/TypelevelCiSigningPlugin.scala

@@ -16,17 +16,16 @@
 
 package org.typelevel.sbt
 
-import io.crashbox.gpg.SbtGpg
+import com.jsuereth.sbtpgp.SbtPgp
+import com.jsuereth.sbtpgp.SbtPgp.autoImport.useGpgAgent
 import org.typelevel.sbt.gha.GenerativePlugin
 import org.typelevel.sbt.gha.GenerativePlugin.autoImport._
 import org.typelevel.sbt.gha.GitHubActionsPlugin
 import sbt._
 
-import Keys._
-
 object TypelevelCiSigningPlugin extends AutoPlugin {
 
-  override def requires = SbtGpg && GitHubActionsPlugin && GenerativePlugin
+  override def requires = SbtPgp && GitHubActionsPlugin && GenerativePlugin
 
   override def trigger = allRequirements
 
@@ -55,10 +54,8 @@ object TypelevelCiSigningPlugin extends AutoPlugin {
     )
   )
 
-  import SbtGpg.autoImport._
-
   override def projectSettings = Seq(
-    gpgWarnOnFailure := isSnapshot.value
+    useGpgAgent := false
   )
 
   private val env = Map(

docs/customization.md

@@ -14,7 +14,7 @@ Instead of using the super-plugins, for finer-grained control you can always add
 
 - `tlIsScala3` (setting): `true`, if `scalaVersion` is 3.x.
 - `tlCommandAliases` (setting): Command aliases defined for this build.
-- `tlReleaseLocal` (command): Alias for `+publishLocal`.
+- `tlReleaseLocal` (command): Alias for `+publishLocalSigned`.
 
 ### sbt-typelevel-versioning
 `TypelevelVersioningPlugin`: Establishes a git-based, early semantic versioning scheme.
@@ -31,7 +31,7 @@ Instead of using the super-plugins, for finer-grained control you can always add
 ### sbt-typelevel-sonatype
 `TypelevelSonatypePlugin`: Sets up publishing to Sonatype/Maven.
 
-- `tlRelease` (command): Check binary-compatibility and `+publish` to Sonatype.
+- `tlRelease` (command): Check binary-compatibility and `+publishSigned` to Sonatype.
 
 `TypelevelUnidocPlugin`: Sets up publishing a Scaladoc-only artifact to Sonatype/Maven.
 

docs/plugins.dot

@@ -4,7 +4,7 @@ digraph {
   fix[label="sbt-scalafix"]
   fmt[label="sbt-scalafmt"]
   git[label="sbt-git"]
-  gpg[label="sbt-gpg"]
+  pgp[label="sbt-pgp"]
   header[label="sbt-header"]
   laika[label="laika-sbt"]
   mdoc[label="sbt-mdoc"]
@@ -47,7 +47,7 @@ digraph {
 
   tlcisigning[label="sbt-typelevel-ci-signing"];
   tlcisigning -> tlgha;
-  tlcisigning -> gpg;
+  tlcisigning -> pgp;
 
   tlsonatypecirelease[label="sbt-typelevel-sonatype-ci-release"];
   tlsonatypecirelease -> tlsonatype;

kernel/src/main/scala/org/typelevel/sbt/TypelevelKernelPlugin.scala

@@ -62,7 +62,7 @@ object TypelevelKernelPlugin extends AutoPlugin {
   override def globalSettings = Seq(
     Def.derive(tlIsScala3 := scalaVersion.value.startsWith("3.")),
     tlCommandAliases := Map(
-      "tlReleaseLocal" -> List("reload", "project /", "+publishLocal")
+      "tlReleaseLocal" -> List("reload", "project /", "+publishLocalSigned")
     ),
     onLoad := {
       val aliases = tlCommandAliases.value

sonatype/build.sbt

@@ -1,2 +1,3 @@
 addSbtPlugin("com.typesafe" % "sbt-mima-plugin" % "1.1.6")
 addSbtPlugin("com.github.sbt" % "sbt-unidoc" % "0.6.1")
+addSbtPlugin("com.github.sbt" % "sbt-pgp" % "2.3.1")

sonatype/src/main/scala/org/typelevel/sbt/TypelevelSonatypePlugin.scala

@@ -36,7 +36,7 @@ object TypelevelSonatypePlugin extends AutoPlugin {
         "reload",
         "project /",
         "+mimaReportBinaryIssues",
-        "+publish",
+        "+publishSigned",
         "tlSonatypeBundleReleaseIfRelevant")
     }
   )