jreleaser.yml

# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
#
# SPDX-License-Identifier: CC0-1.0

# Basic project metadata
project:
  name: eudiw-wallet-token-lib
  description: A PoC Library to support different token formats for EUDI wallet such as SD-JWT and mDL
  license: EUPL-1.2 
  copyright: 2025 Digg - The Agency for Digital Government
  inceptionYear: 2025
  authors:
    - Digg - Agency for Digital Government
  snapshot:
    pattern: .*-SNAPSHOT
    label: early-access
    fullChangelog: true

# GitHub release configuration
release:
  github:
    owner: diggsweden
    overwrite: true     # Allows updating existing releases
    draft: false        # Creates as final release, not draft
    sign: true          # Signs release assets
    branch: main
    changelog:
      enabled: true
      external: ReleasenotesTmp

checksum:
  algorithms:
    - SHA-256
    - SHA-512

# GPG signing configuration
signing:
  active: ALWAYS
  armored: true

# Maven deployment to GitHub packages
deploy:
  maven:
    github:
      app:
        active: ALWAYS
        url: https://maven.pkg.github.com/diggsweden/eudiw-wallet-token-lib
        applyMavenCentralRules: true
        snapshotSupported: true
        stagingRepositories:           
          - target/staging-deploy

# SBOM generation
catalog:
  sbom:
    syft:
      active: ALWAYS
      formats: 
        - CYCLONEDX_JSON  
        - SPDX_JSON
      pack:
        enabled: true

# Syft need to know what to sign
distributions:
  library:
    artifacts:
      - path: target/eudiw-wallet-token-lib-{{projectVersion}}.jar