From 8d005d1a21fa275a5338cc24e65a0d75c575a1cd Mon Sep 17 00:00:00 2001
From: boronine-bot <boronine-bot@users.noreply.github.com>
Date: Sat, 1 Aug 2026 05:12:28 +0000
Subject: [PATCH 1/4] Migrate from OSSRH to Central Publishing Maven Plugin

- Replace nexus-staging-maven-plugin with central-publishing-maven-plugin 0.11.0
- Remove distributionManagement (no longer needed)
- Update README deployment instructions for new Central Publishing flow
- Use Portal token authentication instead of legacy OSSRH credentials
---
 README.md | 28 +++++++++++-----------------
 pom.xml   | 20 ++++++--------------
 2 files changed, 17 insertions(+), 31 deletions(-)

diff --git a/README.md b/README.md
index 03f6cce..a1d11f4 100644
--- a/README.md
+++ b/README.md
@@ -73,31 +73,25 @@ var color = android.graphics.Color.rgb(r, g, b);
 
 Docs:
 
-- https://central.sonatype.org/publish/publish-maven/
+- https://central.sonatype.org/publish/publish-portal-maven/
 - https://central.sonatype.org/publish/requirements/gpg/
+- https://central.sonatype.org/publish/generate-portal-token/
 
-Set `~/m2/settings.xml`:
+Generate a Portal token at https://central.sonatype.com, then set `~/.m2/settings.xml`:
 
 ```xml
 <settings>
     <servers>
         <server>
-            <id>ossrh</id>
-            <username>hsluv</username>
-            <password>REDACTEDREDACTEDREDACTED</password>
+            <id>central</id>
+            <username><!-- your token username --></username>
+            <password><!-- your token password --></password>
+        </server>
+        <server>
+            <id>EBFD22439E5C59D664D0CFC750617B51F61187C2</id>
+            <passphrase><!-- your GPG key passphrase --></passphrase>
         </server>
     </servers>
-    <profiles>
-        <profile>
-            <id>ossrh</id>
-            <activation>
-                <activeByDefault>true</activeByDefault>
-            </activation>
-            <properties>
-                <gpg.passphrase>REDACTEDREDACTEDREDACTED</gpg.passphrase>
-            </properties>
-        </profile>
-    </profiles>
 </settings>
 ```
 
@@ -105,5 +99,5 @@ Then run:
 
 ```bash
 mvn versions:set -DnewVersion=0.3 # bump version
-mvn clean deploy -P release
+mvn clean deploy
 ```
diff --git a/pom.xml b/pom.xml
index f1c00da..b45ae17 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,25 +57,17 @@
         </dependency>
     </dependencies>
 
-    <distributionManagement>
-        <snapshotRepository>
-            <id>ossrh</id>
-            <url>https://oss.sonatype.org/content/repositories/snapshots</url>
-        </snapshotRepository>
-    </distributionManagement>
-
     <build>
         <plugins>
-            <!-- https://central.sonatype.org/publish/publish-maven/ -->
             <plugin>
-                <groupId>org.sonatype.plugins</groupId>
-                <artifactId>nexus-staging-maven-plugin</artifactId>
-                <version>1.6.13</version>
+                <groupId>org.sonatype.central</groupId>
+                <artifactId>central-publishing-maven-plugin</artifactId>
+                <version>0.11.0</version>
                 <extensions>true</extensions>
                 <configuration>
-                    <serverId>ossrh</serverId>
-                    <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-                    <autoReleaseAfterClose>true</autoReleaseAfterClose>
+                    <publishingServerId>central</publishingServerId>
+                    <autoPublish>true</autoPublish>
+                    <waitUntil>published</waitUntil>
                 </configuration>
             </plugin>
             <plugin>

From c6c6f3453c65ea07fbba090d19ce30d4f3ef3752 Mon Sep 17 00:00:00 2001
From: boronine-bot <boronine-bot@users.noreply.github.com>
Date: Sun, 16 Aug 2026 15:16:42 +0000
Subject: [PATCH 2/4] Bump version to 1.0.1

---
 README.md | 4 ++--
 pom.xml   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index a1d11f4..67d8305 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ If you are using Maven, add the following to your `pom.xml` file:
     <dependency>
         <groupId>org.hsluv</groupId>
         <artifactId>hsluv</artifactId>
-        <version>1.0</version>
+        <version>1.0.1</version>
     </dependency>
 
 # Usage
@@ -98,6 +98,6 @@ Generate a Portal token at https://central.sonatype.com, then set `~/.m2/setting
 Then run:
 
 ```bash
-mvn versions:set -DnewVersion=0.3 # bump version
+mvn versions:set -DnewVersion=1.0.1 # bump version
 mvn clean deploy
 ```
diff --git a/pom.xml b/pom.xml
index b45ae17..d89258c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
     <groupId>org.hsluv</groupId>
     <artifactId>hsluv</artifactId>
     <packaging>jar</packaging>
-    <version>1.0</version>
+    <version>1.0.1</version>
 
     <name>hsluv</name>
     <description>Human-friendly HSL</description>

From cd2672c6433c0f8b27545c95bfddeac49a91e70c Mon Sep 17 00:00:00 2001
From: boronine-bot <boronine-bot@users.noreply.github.com>
Date: Sun, 16 Aug 2026 15:17:39 +0000
Subject: [PATCH 3/4] Add GitHub Actions release workflow for Maven Central

---
 .github/workflows/release.yml | 51 +++++++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 .github/workflows/release.yml

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..31fa943
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,51 @@
+name: Release to Maven Central
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 8
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '8'
+
+      - name: Import GPG key
+        env:
+          GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
+        run: |
+          echo "$GPG_PRIVATE_KEY" | gpg --batch --import
+
+      - name: Configure Maven settings
+        env:
+          CENTRAL_TOKEN_USERNAME: ${{ secrets.CENTRAL_TOKEN_USERNAME }}
+          CENTRAL_TOKEN_PASSWORD: ${{ secrets.CENTRAL_TOKEN_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+        run: |
+          mkdir -p ~/.m2
+          cat > ~/.m2/settings.xml <<EOF
+          <settings>
+            <servers>
+              <server>
+                <id>central</id>
+                <username>${CENTRAL_TOKEN_USERNAME}</username>
+                <password>${CENTRAL_TOKEN_PASSWORD}</password>
+              </server>
+              <server>
+                <id>EBFD22439E5C59D664D0CFC750617B51F61187C2</id>
+                <passphrase>${GPG_PASSPHRASE}</passphrase>
+              </server>
+            </servers>
+          </settings>
+          EOF
+
+      - name: Publish to Maven Central
+        run: mvn --batch-mode clean deploy

From a1138cdaab6eb4620675702932ac79306da34c33 Mon Sep 17 00:00:00 2001
From: boronine-bot <boronine-bot@users.noreply.github.com>
Date: Sun, 16 Aug 2026 18:37:54 +0000
Subject: [PATCH 4/4] Rotate to fresh RSA 4096 signing key

---
 .github/workflows/release.yml | 2 +-
 README.md                     | 2 +-
 pom.xml                       | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 31fa943..62ac400 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,7 +40,7 @@ jobs:
                 <password>${CENTRAL_TOKEN_PASSWORD}</password>
               </server>
               <server>
-                <id>EBFD22439E5C59D664D0CFC750617B51F61187C2</id>
+                <id>D7771F55ED62AAC7162CFDE833B20E4440CDF36D</id>
                 <passphrase>${GPG_PASSPHRASE}</passphrase>
               </server>
             </servers>
diff --git a/README.md b/README.md
index 67d8305..2b47af2 100644
--- a/README.md
+++ b/README.md
@@ -88,7 +88,7 @@ Generate a Portal token at https://central.sonatype.com, then set `~/.m2/setting
             <password><!-- your token password --></password>
         </server>
         <server>
-            <id>EBFD22439E5C59D664D0CFC750617B51F61187C2</id>
+            <id>D7771F55ED62AAC7162CFDE833B20E4440CDF36D</id>
             <passphrase><!-- your GPG key passphrase --></passphrase>
         </server>
     </servers>
diff --git a/pom.xml b/pom.xml
index d89258c..9e10e2a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,8 +108,8 @@
                             <goal>sign</goal>
                         </goals>
                         <configuration>
-                            <keyname>EBFD22439E5C59D664D0CFC750617B51F61187C2</keyname>
-                            <passphraseServerId>EBFD22439E5C59D664D0CFC750617B51F61187C2</passphraseServerId>
+                            <keyname>D7771F55ED62AAC7162CFDE833B20E4440CDF36D</keyname>
+                            <passphraseServerId>D7771F55ED62AAC7162CFDE833B20E4440CDF36D</passphraseServerId>
                             <gpgArguments>
                                 <arg>--pinentry-mode</arg>
                                 <arg>loopback</arg>