Description

<dependency>
    <groupId>io.github.thevilledev</groupId>
    <artifactId>hayahash</artifactId>
    <version>0.5.0</version>
</dependency>

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>io.github.thevilledev</groupId>
  <artifactId>hayahash</artifactId>
  <version>0.5.0</version>
  <packaging>jar</packaging>

  <name>hayahash</name>
  <description>hayahash64 and hayahash128; bit-exact Java port of the C reference implementation</description>
  <url>https://github.com/thevilledev/hayahash</url>

  <licenses>
    <license>
      <name>The Unlicense</name>
      <url>https://unlicense.org/</url>
      <distribution>repo</distribution>
    </license>
  </licenses>

  <!-- developers and scm are required metadata for Maven Central. -->
  <developers>
    <developer>
      <id>thevilledev</id>
      <name>Ville Vesilehto</name>
      <email>ville@vesilehto.fi</email>
      <url>https://github.com/thevilledev</url>
    </developer>
  </developers>

  <scm>
    <connection>scm:git:https://github.com/thevilledev/hayahash.git</connection>
    <developerConnection>scm:git:ssh://git@github.com/thevilledev/hayahash.git</developerConnection>
    <url>https://github.com/thevilledev/hayahash/tree/main/java</url>
  </scm>

  <properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <maven.compiler.release>17</maven.compiler.release>
  </properties>

  <dependencies>
    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter</artifactId>
      <version>6.1.2</version>
      <scope>test</scope>
    </dependency>
  </dependencies>

  <build>
    <plugins>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-compiler-plugin</artifactId>
        <version>3.15.0</version>
        <configuration>
          <compilerArgs>
            <arg>-Xlint:all</arg>
            <arg>-Werror</arg>
          </compilerArgs>
          <showWarnings>true</showWarnings>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-surefire-plugin</artifactId>
        <version>3.5.6</version>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-jar-plugin</artifactId>
        <version>3.5.1</version>
        <configuration>
          <archive>
            <manifestEntries>
              <Automatic-Module-Name>io.github.thevilledev.hayahash</Automatic-Module-Name>
            </manifestEntries>
          </archive>
        </configuration>
      </plugin>
      <plugin>
        <groupId>com.diffplug.spotless</groupId>
        <artifactId>spotless-maven-plugin</artifactId>
        <version>3.9.0</version>
        <configuration>
          <java>
            <googleJavaFormat>
              <version>1.28.0</version>
            </googleJavaFormat>
          </java>
        </configuration>
      </plugin>
      <plugin>
        <groupId>com.github.spotbugs</groupId>
        <artifactId>spotbugs-maven-plugin</artifactId>
        <version>4.10.3.0</version>
        <executions>
          <execution>
            <goals>
              <goal>check</goal>
            </goals>
          </execution>
        </executions>
        <configuration>
          <failOnError>true</failOnError>
          <threshold>Low</threshold>
        </configuration>
      </plugin>
      <!-- Replaces the deploy phase with an upload to the Central
           Publisher Portal; only runs on `mvn deploy`. -->
      <plugin>
        <groupId>org.sonatype.central</groupId>
        <artifactId>central-publishing-maven-plugin</artifactId>
        <version>0.11.0</version>
        <extensions>true</extensions>
        <configuration>
          <publishingServerId>central</publishingServerId>
          <autoPublish>true</autoPublish>
        </configuration>
      </plugin>
    </plugins>
  </build>

  <!-- Source/javadoc jars and GPG signatures are required by Maven
       Central but not wanted in everyday test builds; the release
       workflow runs `mvn -Prelease deploy`. -->
  <profiles>
    <profile>
      <id>release</id>
      <build>
        <plugins>
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-source-plugin</artifactId>
            <version>3.4.0</version>
            <executions>
              <execution>
                <id>attach-sources</id>
                <goals>
                  <goal>jar-no-fork</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-javadoc-plugin</artifactId>
            <version>3.12.0</version>
            <executions>
              <execution>
                <id>attach-javadocs</id>
                <goals>
                  <goal>jar</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
          <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-gpg-plugin</artifactId>
            <version>3.2.8</version>
            <executions>
              <execution>
                <id>sign-artifacts</id>
                <phase>verify</phase>
                <goals>
                  <goal>sign</goal>
                </goals>
              </execution>
            </executions>
            <configuration>
              <!-- Pure-Java signer: it takes the key from the
                   MAVEN_GPG_KEY environment variable (fingerprint
                   from MAVEN_GPG_KEY_FINGERPRINT, passphrase from
                   MAVEN_GPG_PASSPHRASE) and cannot read a local
                   keyring at all. Release artifacts are therefore
                   signed with a dedicated release key, and the
                   commit-signing key in ~/.gnupg is unreachable
                   from this build even by accident. It also needs
                   no gpg binary or agent, so batch signing works
                   without pinentry workarounds. -->
              <signer>bc</signer>
            </configuration>
          </plugin>
        </plugins>
      </build>
    </profile>
  </profiles>
</project>