Howdy, The Apache Maven team is pleased to announce the release of the Apache Maven GPG Plugin, version 3.2.6
This release is a bugfix release. This plugin signs all of the project's attached artifacts with GnuPG or BC. https://maven.apache.org/plugins/maven-gpg-plugin/ You should specify the version in your project's plugin configuration: <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-gpg-plugin</artifactId> <version>3.2.6</version> </plugin> You can download the appropriate sources etc. from the download page: https://maven.apache.org/plugins/maven-gpg-plugin/download.cgi Release Notes - Maven GPG Plugin - Version 3.2.6 ** Improvement * [MGPG-135] - Support Overriding / Enhance the signer in AbstractGpgMojo * [MGPG-138] - Drop use of plexus-cipher and sec dispatcher, use proper API * [MGPG-141] - Move off deprecated classes ** Dependency upgrade * [MGPG-139] - (build) Bump org.apache.maven.plugins:maven-invoker-plugin from 3.7.0 to 3.8.0 * [MGPG-140] - Update to Maven 3.9.9 * [MGPG-142] - Move to plexus-utils 4.0.1 and plexus-xml 3.0.1 Have fun, -The Apache Maven team