This is an automated email from the ASF dual-hosted git repository.

Kusuma04-dev pushed a commit to branch test_103
in repository https://gitbox.apache.org/repos/asf/incubator-kie.git


The following commit(s) were added to refs/heads/test_103 by this push:
     new 395efc89395 tests
395efc89395 is described below

commit 395efc893957a56432f7ea89c17992a4693cce28
Author: Kusuma <[email protected]>
AuthorDate: Sat Oct 17 21:07:56 2026 +0530

    tests
---
 .ci/jenkins/project/Jenkinsfile.103xplus.release | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/.ci/jenkins/project/Jenkinsfile.103xplus.release 
b/.ci/jenkins/project/Jenkinsfile.103xplus.release
index dd33abf15f5..dd32628d718 100644
--- a/.ci/jenkins/project/Jenkinsfile.103xplus.release
+++ b/.ci/jenkins/project/Jenkinsfile.103xplus.release
@@ -56,7 +56,7 @@ pipeline {
         // Jenkins IDs — defaults match the existing KIE Jenkins; override 
only if they differ.
         string(name: 'MAVEN_SETTINGS_CONFIG_FILE_ID', defaultValue: 
'kie-release-authn-settings', description: 'Config File Provider ID of the 
Maven settings.xml (must define server "apache.releases.https")', trim: true)
         string(name: 'GPG_KEY_CREDS_ID', defaultValue: 'GPG_KEY_FILE', 
description: 'Secret FILE credential ID holding the armored GPG private key', 
trim: true)
-        string(name: 'GPG_PASSPHRASE_CREDS_ID', defaultValue: 
'GPG_KEY_PASSPHRASE', description: 'Secret TEXT credential ID holding the GPG 
key passphrase', trim: true)
+        string(name: 'GPG_PASSPHRASE_CREDS_ID', defaultValue: '', description: 
'Optional. Secret TEXT credential ID holding the GPG key passphrase. Leave 
empty if the key has no passphrase (KIE release key has none)', trim: true)
         string(name: 'GIT_PUSH_CREDS_ID', defaultValue: 
'84811880-2025-45b6-a44c-2f33bef30ad2', description: 'Username/password 
credential ID used to push the RC tag to GitHub', trim: true)
         string(name: 'GIT_AUTHOR_NAME', defaultValue: 'Apache KIE Release 
Bot', description: 'git user.name for the R commit', trim: true)
         string(name: 'GIT_AUTHOR_EMAIL', defaultValue: '[email protected]', 
description: 'git user.email for the R commit', trim: true)
@@ -85,13 +85,17 @@ pipeline {
                 // The Maven settings id is a Config File Provider id (not a 
secret) and is
                 // exposed as MAVEN_SETTINGS_FILE. GPG key/passphrase and the 
GitHub push
                 // credential are real credentials and use withCredentials.
-                configFileProvider([configFile(fileId: 
params.MAVEN_SETTINGS_CONFIG_FILE_ID, variable: 'MAVEN_SETTINGS_FILE')]) {
-                    withCredentials([
+                script {
+                    def creds = [
                         file(credentialsId: params.GPG_KEY_CREDS_ID, variable: 
'GPG_KEY_FILE_PATH'),
-                        string(credentialsId: params.GPG_PASSPHRASE_CREDS_ID, 
variable: 'MAVEN_GPG_PASSPHRASE'),
                         usernamePassword(credentialsId: 
params.GIT_PUSH_CREDS_ID, usernameVariable: 'GITHUB_USER', passwordVariable: 
'GITHUB_TOKEN')
-                    ]) {
-                        script {
+                    ]
+                    // Passphrase is optional: the KIE release signing key has 
none.
+                    if (params.GPG_PASSPHRASE_CREDS_ID?.trim()) {
+                        creds << string(credentialsId: 
params.GPG_PASSPHRASE_CREDS_ID, variable: 'MAVEN_GPG_PASSPHRASE')
+                    }
+                    configFileProvider([configFile(fileId: 
params.MAVEN_SETTINGS_CONFIG_FILE_ID, variable: 'MAVEN_SETTINGS_FILE')]) {
+                        withCredentials(creds) {
                             // Import the signing key so the apache-release 
profile can sign
                             // artifacts. Passphrase is supplied later via 
MAVEN_GPG_PASSPHRASE.
                             sh '''#!/usr/bin/env bash
@@ -124,8 +128,8 @@ pipeline {
                             if (params.DRY_RUN)                releaseArgs << 
'--dry-run'
 
                             // MAVEN_SETTINGS_FILE is injected by 
configFileProvider above.
-                            // MAVEN_GPG_PASSPHRASE is already in env from 
withCredentials
-                            // and is read by the GPG plugin directly (not a 
CLI arg).
+                            // If a passphrase credential was given, 
MAVEN_GPG_PASSPHRASE is in
+                            // env and read by the GPG plugin directly (not a 
CLI arg).
                             withEnv(["MAVEN_SETTINGS=${MAVEN_SETTINGS_FILE}"]) 
{
                                 sh """#!/usr/bin/env bash
                                 set -euo pipefail


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to