I probably missed something in the recent discussions on the release process⦠Sorry for thatā¦
Iām currently releasing Hipparchus 4.0.2 and have some issue to deploy the artefacts.
I have an error 403 āForbiddenā when deploying the artefacts. I tried to connect to sonatype with my login and password but I have the following error message
Incorrect username, password or no permission to use the Nexus User Interface. Try again.Forbidden
Ok, Iāve looked at the Git history of Orekit pom.xml and it looks we have missing updates for Hipparchus deployments since sonatype is ādeadā. Actions like:
I will need to remove the 4.0.2 tag and try to do these steps. However, Iām far to be a devops expert. So before releasing, Iāll need a small review
In fact, there is a all bunch of things that have been done for Orekit release process.
The release guide has been rewritten and scripts have been set up to simplify the release (itās now only a matter of running scripts, almost nothing manual anymore). However, this has not been done for Hipparchus and since Hipparchus is a multi-modules project, things are going to be different (mainly regarding the changes.xml and artifacts uploading).
You can look at the release guide and at the new scripts directory, perhaps running similar steps manually on Hipparchus side. I donāt yet have time to create the scripts for Hipparchus, but this is something we should definitely do.
Yes I agree that one day this script should exist for Hipparchus. But currently, all steps can be done manually for Hipparchus.
The only step Iām missing is the deploy (the documentation is updated, and the tag, that I just removed, was done). And it can be done without script. My only questions are:
Shall we apply to Hipparchus pom.xml the same changes as Orekitās pom.xml?
Shall me modify other things related to Hipparchus CI or just the pom.xml modifications are sufficient?
I guess the modifications in the pom are sufficient.
There is also a way to deploy artifacts accessing the web interface from a browser, you can look at the links to Sonatype that should be somewhere in the release guide.
If you canāt do it, I may find time to do the release for you tonight.
You are right
Unfortunately Hipparchus continuous integration is completely different from Orekit continuous integration (itās github actions, not gitlab CI)
I have a last question. In case I do something wrong (which is 99% possible since Iām not familiar with this new process), do we need special rights to drop deployments?
It looks like I canāt on both Orekit and Rugged. Maybe we canāt drop artefact already published (i.e., not staging). Or maybe we can only drop what we upload.
For sure, artifacts that have been published can never be dropped, this was always the case for maven artifacts. Dropping an artifact can only be done between upload and publish.
I also think Sonatype wrote me that they had plans for roles but not yet implemented it, so currently only the person who uploaded an artifact can drop it (because only this person can see it). This is the reason we moved to upload artifacts after the vote and we use our own package.orekit.org server as a staging area during the vote.
But for a patch release without vote, this is moot.