Description

<dependency>
    <groupId>eu.trustbeat</groupId>
    <artifactId>trustbeat-sdk</artifactId>
    <version>0.3.0</version>
</dependency>

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>eu.trustbeat</groupId>
  <artifactId>trustbeat-sdk</artifactId>
  <version>0.3.0</version>
  <packaging>jar</packaging>

  <name>TrustBeat SDK</name>
  <description>TrustBeat SDK — qualified timestamping and Merkle anchoring</description>
  <url>https://trustbeat.eu</url>

  <licenses>
    <license>
      <name>MIT License</name>
      <url>https://opensource.org/licenses/MIT</url>
    </license>
  </licenses>

  <organization>
    <name>Trustbeat s.r.o.</name>
    <url>https://trustbeat.eu</url>
  </organization>

  <developers>
    <developer>
      <name>Trustbeat s.r.o.</name>
      <organization>Trustbeat s.r.o.</organization>
      <organizationUrl>https://trustbeat.eu</organizationUrl>
    </developer>
  </developers>

  <scm>
    <url>https://github.com/TrustBeat/sdk-java</url>
    <connection>scm:git:https://github.com/TrustBeat/sdk-java.git</connection>
    <developerConnection>scm:git:git@github.com:TrustBeat/sdk-java.git</developerConnection>
  </scm>

  <properties>
    <java.version>11</java.version>
    <maven.compiler.source>${java.version}</maven.compiler.source>
    <maven.compiler.target>${java.version}</maven.compiler.target>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <junit.version>5.11.4</junit.version>
  </properties>

  <dependencies>
    <!-- Zero runtime dependencies — stdlib only (java.net.http, java.security) -->

    <!-- Test dependencies only -->
    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter</artifactId>
      <version>${junit.version}</version>
      <scope>test</scope>
    </dependency>
  </dependencies>

  <build>
    <plugins>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-surefire-plugin</artifactId>
        <version>3.5.2</version>
      </plugin>
      <!-- Keep the dev/E2E smoke runner out of the published jar.
           It stays compiled in target/classes for tests/e2e/sdk_smoke.py. -->
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-jar-plugin</artifactId>
        <version>3.4.2</version>
        <configuration>
          <excludes>
            <exclude>**/Smoke.class</exclude>
          </excludes>
        </configuration>
      </plugin>
    </plugins>
  </build>

  <!--
    Maven Central release plumbing. Inactive by default so `mvn test`/`package`
    stay fast and need no GPG key. Activate explicitly when cutting a release:

        mvn -P release clean deploy

    Requires: a verified `eu.trustbeat` namespace on central.sonatype.com, a GPG
    signing key, and a `central` server entry (Portal token) plus GPG passphrase
    in settings.xml / CI secrets. See RELEASING.md.
  -->
  <profiles>
    <profile>
      <id>release</id>
      <build>
        <plugins>
          <!-- Required by Central: -sources.jar (Smoke dev runner excluded). -->
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-source-plugin</artifactId>
            <version>3.3.1</version>
            <configuration>
              <excludes>
                <exclude>**/Smoke.java</exclude>
              </excludes>
            </configuration>
            <executions>
              <execution>
                <id>attach-sources</id>
                <goals><goal>jar-no-fork</goal></goals>
              </execution>
            </executions>
          </plugin>

          <!-- Required by Central: -javadoc.jar. -->
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-javadoc-plugin</artifactId>
            <version>3.11.2</version>
            <configuration>
              <doclint>none</doclint>
              <quiet>true</quiet>
            </configuration>
            <executions>
              <execution>
                <id>attach-javadocs</id>
                <goals><goal>jar</goal></goals>
              </execution>
            </executions>
          </plugin>

          <!-- Required by Central: GPG signatures on every artifact.
               Passphrase is read from the MAVEN_GPG_PASSPHRASE env var. -->
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-gpg-plugin</artifactId>
            <version>3.2.7</version>
            <executions>
              <execution>
                <id>sign-artifacts</id>
                <phase>verify</phase>
                <goals><goal>sign</goal></goals>
              </execution>
            </executions>
          </plugin>

          <!-- Uploads the bundle to the Central Portal and (auto)publishes it.
               Credentials come from the <server id="central"> entry. -->
          <plugin>
            <groupId>org.sonatype.central</groupId>
            <artifactId>central-publishing-maven-plugin</artifactId>
            <version>0.7.0</version>
            <extensions>true</extensions>
            <configuration>
              <publishingServerId>central</publishingServerId>
              <autoPublish>true</autoPublish>
              <waitUntil>published</waitUntil>
            </configuration>
          </plugin>
        </plugins>
      </build>
    </profile>
  </profiles>
</project>