ci: bind central credentials to Central Portal for Maven 3.10

.github/workflows/maven-push-3.0.yml

@@ -33,6 +33,12 @@ jobs:
         with:
           repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
           servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
+      - name: Bind central credentials to Central Portal
+        # Maven 3.10+ only sends server credentials to declared origins; without this,
+        # server id "central" is bound to repo.maven.apache.org and deploys get HTTP 401.
+        run: |
+          sed -i "s#<id>central</id>#<id>central</id><repositoryOrigins><repositoryOrigin>https://central.sonatype.com</repositoryOrigin></repositoryOrigins>#" "$HOME/.m2/settings.xml"
+          grep -q "<repositoryOrigin>https://central.sonatype.com</repositoryOrigin>" "$HOME/.m2/settings.xml"
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx

.github/workflows/release-codegen-3.yml

@@ -116,6 +116,13 @@ jobs:
           repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
           servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
 
+      - name: Bind central credentials to Central Portal
+        # Maven 3.10+ only sends server credentials to declared origins; without this,
+        # server id "central" is bound to repo.maven.apache.org and deploys get HTTP 401.
+        run: |
+          sed -i "s#<id>central</id>#<id>central</id><repositoryOrigins><repositoryOrigin>https://central.sonatype.com</repositoryOrigin></repositoryOrigins>#" "$HOME/.m2/settings.xml"
+          grep -q "<repositoryOrigin>https://central.sonatype.com</repositoryOrigin>" "$HOME/.m2/settings.xml"
+
       - name: Validate and resolve versions
         id: resolve
         # Computes build/deploy coordinates and enforces safe release preconditions.
@@ -158,6 +165,13 @@ jobs:
           repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
           servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
 
+      - name: Bind central credentials to Central Portal
+        # Maven 3.10+ only sends server credentials to declared origins; without this,
+        # server id "central" is bound to repo.maven.apache.org and deploys get HTTP 401.
+        run: |
+          sed -i "s#<id>central</id>#<id>central</id><repositoryOrigins><repositoryOrigin>https://central.sonatype.com</repositoryOrigin></repositoryOrigins>#" "$HOME/.m2/settings.xml"
+          grep -q "<repositoryOrigin>https://central.sonatype.com</repositoryOrigin>" "$HOME/.m2/settings.xml"
+
       - name: Build codegen with bootstrap generators
         run: |
           bash CI/release/build-codegen-with-generators.sh "${{ needs.validate.outputs.bootstrap_generators_version }}"
@@ -200,6 +214,13 @@ jobs:
           repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
           servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
 
+      - name: Bind central credentials to Central Portal
+        # Maven 3.10+ only sends server credentials to declared origins; without this,
+        # server id "central" is bound to repo.maven.apache.org and deploys get HTTP 401.
+        run: |
+          sed -i "s#<id>central</id>#<id>central</id><repositoryOrigins><repositoryOrigin>https://central.sonatype.com</repositoryOrigin></repositoryOrigins>#" "$HOME/.m2/settings.xml"
+          grep -q "<repositoryOrigin>https://central.sonatype.com</repositoryOrigin>" "$HOME/.m2/settings.xml"
+
       - name: Build swagger-codegen-generators
         run: |
           mvn -B -U clean install \
@@ -263,6 +284,13 @@ jobs:
           repositories: '[{"id":"central-portal-snapshots","name":"Sonatype Central Portal snapshots","url":"https://central.sonatype.com/repository/maven-snapshots/","releases":{"enabled":false},"snapshots":{"enabled":true}}]'
           servers: '[{"id":"central","username":"${{ secrets.MAVEN_CENTRAL_USERNAME }}","password":"${{ secrets.MAVEN_CENTRAL_PASSWORD }}"}]'
 
+      - name: Bind central credentials to Central Portal
+        # Maven 3.10+ only sends server credentials to declared origins; without this,
+        # server id "central" is bound to repo.maven.apache.org and deploys get HTTP 401.
+        run: |
+          sed -i "s#<id>central</id>#<id>central</id><repositoryOrigins><repositoryOrigin>https://central.sonatype.com</repositoryOrigin></repositoryOrigins>#" "$HOME/.m2/settings.xml"
+          grep -q "<repositoryOrigin>https://central.sonatype.com</repositoryOrigin>" "$HOME/.m2/settings.xml"
+
       - name: Build swagger-codegen
         run: |
           bash CI/release/build-codegen-with-generators.sh "${{ needs.validate.outputs.codegen_build_generators_version }}"