Howdy, The Apache Maven team is pleased to announce the release of the Apache Maven GPG Plugin, version 3.2.5
This release is a bugfix release. This plugin signs all of the project's attached artifacts with GnuPG or BC. https://maven.apache.org/plugins/maven-gpg-plugin/ You should specify the version in your project's plugin configuration: <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-gpg-plugin</artifactId> <version>3.2.5</version> </plugin> You can download the appropriate sources etc. from the download page: https://maven.apache.org/plugins/maven-gpg-plugin/download.cgi Release Notes - Maven GPG Plugin - Version 3.2.5 ** Sub-task * [MGPG-130] - Update sigstore extension to ".sigstore.json" ** Dependency upgrade * [MGPG-127] - Bump bouncycastleVersion from 1.78 to 1.78.1 * [MGPG-128] - Update to parent POM 42, prerequisite 3.6.3 * [MGPG-131] - (build) Bump org.apache.maven.plugins:maven-plugins from 42 to 43 * [MGPG-132] - Bump com.kohlschutter.junixsocket:junixsocket-core from 2.9.1 to 2.10.0 * [MGPG-133] - (build) Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.17.0 to 1.18.2 * [MGPG-134] - (build) Bump org.apache.maven.shared:maven-invoker from 3.2.0 to 3.3.0 Have fun, -The Apache Maven team
