Publish releases on Maven Central without a manual step

The Maven Central deployer stopped after upload and validation, and each
deployment waited in the Portal until someone pressed publish. JReleaser
now publishes a deployment as soon as the Portal has validated it (stage
FULL). That holds for the jars that `mise run release` and the release
workflow deploy, and for the native images alike.

skipPublicationCheck ends the deploy once publishing has started.
Without it JReleaser waits for Maven Central to show the files, 20 s at
a time up to 100 times, and a slow sync would fail the release job even
though the publication goes on.

A dry run resolves the deployer to stage FULL with the publication check
skipped, and succeeds.

Author: abashev

.github/workflows/release.yml

@@ -4,8 +4,8 @@ name: Release
 # refuses anything that is not a clean X.Y.Z or X.Y.Z.N.
 #
 # Two deployments per tag, because a published groupId:artifactId:version can never gain files
-# afterwards: the jars go up as one, and every platform's native binary as another. Both are uploaded
-# and validated only — the Portal holds them until someone presses publish.
+# afterwards: the jars go up as one, and every platform's native binary as another. Each is published
+# as soon as the Portal has validated it, with no one pressing publish.
 #
 # After both, a draft GitHub release on the tag collects the runnable jar, the IDE plugins and the native
 # binaries.
@@ -40,7 +40,7 @@ jobs:
           distribution: temurin
           java-version: '21'
 
-      - name: Stage, sign and upload the jars
+      - name: Stage, sign and publish the jars
         run: ./gradlew jreleaserDeploy
         env:
           JRELEASER_DEPLOY_MAVEN_MAVENCENTRAL_SONATYPE_USERNAME: ${{ secrets.JRELEASER_MAVENCENTRAL_USERNAME }}
@@ -145,7 +145,7 @@ jobs:
         run: ls -l native-images
 
       # No GraalVM here: nothing is compiled, the binaries are published exactly as they arrived.
-      - name: Stage, sign and upload the native images
+      - name: Stage, sign and publish the native images
         run: ./gradlew -PreleaseTarget=native -PnativeImages=native-images jreleaserDeploy
         env:
           JRELEASER_DEPLOY_MAVEN_MAVENCENTRAL_SONATYPE_USERNAME: ${{ secrets.JRELEASER_MAVENCENTRAL_USERNAME }}

buildSrc/src/main/groovy/open-java-format.release-conventions.gradle

@@ -79,7 +79,7 @@ jreleaser {
             skipTag = true
             tagName = '{{projectVersion}}'
             releaseName = '{{projectVersion}}'
-            // Published by hand after a look, like the deployments waiting in the Portal.
+            // Published by hand after a look.
             draft = true
             changelog {
                 formatted = 'ALWAYS'
@@ -131,10 +131,11 @@ jreleaser {
                     url = 'https://central.sonatype.com/api/v1/publisher'
                     namespace = 'dev.openjavaformat'
                     applyMavenCentralRules = true
-                    // Upload and validate, then stop. The deployment waits in the Portal until someone
-                    // presses publish, so a version stays reversible until every one of its deployments
-                    // is in and has been looked at.
-                    stage = 'UPLOAD'
+                    // Upload, wait for the Portal to validate the deployment, then publish it: nobody has
+                    // to press publish in the Portal. The deploy ends once publishing has started rather
+                    // than waiting, up to half an hour, for Maven Central to show the files.
+                    stage = 'FULL'
+                    skipPublicationCheck = true
                     stagingRepositories.each { stagingRepository(it) }
                 }
             }

mise.toml

@@ -21,7 +21,7 @@ description = "Run the linux-aarch64 native job locally in Docker"
 run = "act push --job native --matrix platform:linux-aarch64"
 
 # ---- Releases ----
-# JReleaser stages, signs and uploads to the Maven Central Portal the modules listed in
+# JReleaser stages, signs and publishes on the Maven Central Portal the modules listed in
 # buildSrc/src/main/groovy/open-java-format.release-conventions.gradle. The PGP key and the Portal
 # token come from JRELEASER_* variables or ~/.jreleaser/config.properties. Only a clean checkout of a
 # release tag is accepted. Run these through mise, not ./gradlew: JReleaser's POM check finds Java
@@ -32,7 +32,7 @@ run = "act push --job native --matrix platform:linux-aarch64"
 # published version can never gain files afterwards.
 
 [tasks.release]
-description = "Stage, sign, and upload the release to the Maven Central Portal (publishing is a click there)"
+description = "Stage, sign, and publish the release on Maven Central"
 run = "./gradlew clean jreleaserDeploy"
 
 [tasks."release:dry-run"]