fix(ci): pin sonatype stagingProfileId to com.auth0 namespace - #116
Merged
Conversation
pmathew92
approved these changes
Jul 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
Pins the Sonatype
stagingProfileIdto the parentcom.auth0namespace so releases can publish.build.gradle— addedstagingProfileId.set(MAVEN_GROUP_ID)to thenexusPublishing.sonatypeblock.gradle.properties— addedMAVEN_GROUP_ID=com.auth0.Why: The nexus-publish plugin auto-resolves the staging profile by an exact match on the project group (
com.auth0.android), which has no profile of its own. This caused releases to fail withFailed to find staging profile for package group: com.auth0.android. The real profile is the parentcom.auth0namespace, which covers allcom.auth0.*artifacts.Alternative considered: hardcoding the literal
'com.auth0'inbuild.gradle. Chose theMAVEN_GROUP_IDproperty instead to matchui-components-androidand keep the value alongsideGROUP.No API, endpoint, or UI changes — build/release config only.
Testing
Build/release config change only — no unit or integration tests apply.
com.auth0staging profile exists and coverscom.auth0.androidvia the Sonatype staging API (/staging/profile_evaluate?g=com.auth0.androidresolves to thecom.auth0profile).release.ymlrunspublishToSonatype closeSonatypeStagingRepository, which previously failed atinitializeSonatypeStagingRepositorywithFailed to find staging profile for package group: com.auth0.androidand should now succeed.Not tested locally: the full publish requires the
releaseenvironment secrets (Sonatype token + signing key), so it can only be exercised by the CI release run.[x] This change adds test coverage
[x] This change has been tested on the latest version of the platform/language or why not
Checklist
[x] I have read the Auth0 general contribution guidelines
[x] I have read the Auth0 Code of Conduct
[x] All existing and new tests complete without errors