Howdy, The Apache Maven team is pleased to announce the release of the Apache Maven GPG Plugin, version 3.2.7
This release is a bugfix release. This plugin signs all of the project's attached artifacts with GnuPG or BC. https://maven.apache.org/plugins/maven-gpg-plugin/ You should specify the version in your project's plugin configuration: <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-gpg-plugin</artifactId> <version>3.2.7</version> </plugin> You can download the appropriate sources etc. from the download page: https://maven.apache.org/plugins/maven-gpg-plugin/download.cgi Release Notes - Maven GPG Plugin - Version 3.2.7 ** Bug * [MGPG-136] - "gpg: signing failed: Bad passphrase" on GitHub Windows runners ** Dependency upgrade * [MGPG-143] - Bump com.kohlschutter.junixsocket:junixsocket-core from 2.10.0 to 2.10.1 * [MGPG-144] - (test) Bump commons-io:commons-io from 2.16.1 to 2.17.0 Have fun, -The Apache Maven team