wip: fix setup-java to use Central creds from secrets (401 fix)

Author: simbo1905

.github/workflows/release-on-tag.yml

@@ -29,8 +29,8 @@ jobs:
           java-version: '21'
           cache: maven
           server-id: central
-          server-username: CENTRAL_USERNAME
-          server-password: CENTRAL_PASSWORD
+          server-username: ${{ secrets.CENTRAL_USERNAME }}
+          server-password: ${{ secrets.CENTRAL_PASSWORD }}
           gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
           gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
 

AGENTS.md

@@ -84,8 +84,11 @@ Automated Release (preferred)
 - Push a tag named `release/X.Y.Z` (semver, no leading `v`).
 - The workflow `.github/workflows/release-on-tag.yml` will:
   - Create a GitHub Release for that tag with autogenerated notes.
-  - Build and deploy artifacts to Maven Central with `-P release` (Central Publishing plugin). Uses `-Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }}` and optionally `-Dgpg.keyname=${{ secrets.GPG_KEYNAME }}` for signing when set.
-  - Create a branch `release-bot-YYYYMMDD-HHMMSS` at the tagged commit and open a PR back to `main` (no version bumps).
+- Build and deploy artifacts to Maven Central with `-P release` (Central Publishing plugin). Uses `-Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }}` and optionally `-Dgpg.keyname=${{ secrets.GPG_KEYNAME }}` for signing when set.
+- Create a branch `release-bot-YYYYMMDD-HHMMSS` at the tagged commit and open a PR back to `main` (no version bumps).
+
+Credentials wiring
+- The workflow writes `<server id="central">` to settings.xml using `server-username: ${{ secrets.CENTRAL_USERNAME }}` and `server-password: ${{ secrets.CENTRAL_PASSWORD }}`. Ensure those secrets hold your Central Publishing token creds for `io.github.simbo1905`.
 
 Manual Release (local)
 - Ensure POM version is your intended release version.

RELEASE-GIST.md

@@ -27,8 +27,8 @@ jobs:
           java-version: '21'
           cache: maven
           server-id: central
-          server-username: CENTRAL_USERNAME
-          server-password: CENTRAL_PASSWORD
+          server-username: ${{ secrets.CENTRAL_USERNAME }}
+          server-password: ${{ secrets.CENTRAL_PASSWORD }}
           gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
           gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
       - uses: softprops/action-gh-release@v2