Migrate Maven Central publishing to Sonatype Central Portal

Sonatype shut down OSSRH (oss.sonatype.org) on 2025-06-30. The
release workflow still published through it, so v1.3.5's publish
job failed silently after tag/release (issue #84) and the library
has been stuck at 1.3.4 on Maven Central since Dec 2024.

Replaces the manual OSSRH staging config, custom
get_staging_repository_id.py script, and nexus-actions third-party
action with the gradle-nexus/publish-plugin, which talks to the
Central Portal's compatibility endpoint and does stage/close/release
in one Gradle command. Bumps version to 1.3.6 so the fixed pipeline
runs end-to-end on merge.

Note: MAVEN_USERNAME/MAVEN_PASSWORD secrets must be rotated to a
Sonatype Central Portal user token before this can publish
successfully -- the old OSSRH credentials return 401 against the
new endpoint regardless of this change.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: git-wright

.github/workflows/release.yml

@@ -72,32 +72,13 @@ jobs:
           cat <<FILE > _gradle_user_home/gradle.properties
           github.username=${{ secrets.PUSHER_CI_GITHUB_PRIVATE_TOKEN }}
           github.password=""
-          maven.username=${{ secrets.MAVEN_USERNAME }}
-          maven.password=${{ secrets.MAVEN_PASSWORD }}
+          sonatypeUsername=${{ secrets.MAVEN_USERNAME }}
+          sonatypePassword=${{ secrets.MAVEN_PASSWORD }}
           signing.keyId=${{ secrets.SIGNING_KEY_ID }}
           signing.password=${{ secrets.SIGNING_PASSWORD }}
           signing.secretKeyRingFile=_gradle_user_home/pusher-maven-gpg-signing-key.gpg
           FILE
           echo "${{ secrets.PUSHER_MAVEN_GPG_SIGNING_KEY }}" | base64 --decode > _gradle_user_home/pusher-maven-gpg-signing-key.gpg
       - name: Publish
         run: |
-          ./gradlew publish
-
-  finish-release:
-    runs-on: ubuntu-latest
-    needs: publish
-    env:
-      NEXUS_USERNAME: ${{ secrets.MAVEN_USERNAME }}
-      NEXUS_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-    steps:
-      - uses: actions/checkout@v4
-      - id: get_staging_repository_id
-        name: Get staging repository id
-        run: |
-          echo "staging_repository_id=$(python3 scripts/get_staging_repository_id.py)" >> $GITHUB_OUTPUT
-      - name: Release
-        uses: nexus-actions/release-nexus-staging-repo@main
-        with:
-          username: ${{ secrets.MAVEN_USERNAME }}
-          password: ${{ secrets.MAVEN_PASSWORD }}
-          staging_repository_id: ${{ steps.get_staging_repository_id.outputs.staging_repository_id }}
+          ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.3.6
+
+- [CHANGED] Migrate Maven Central publishing from the retired Sonatype OSSRH service to the Sonatype Central Portal, via the gradle-nexus/publish-plugin. 1.3.5 was tagged and released on GitHub but never reached Maven Central because OSSRH had already shut down; this release re-publishes the same code through the working pipeline.
+
 ## 1.3.5
 
 - [CHANGED] Update async-http-client to 3.0.6.

build.gradle

@@ -10,6 +10,7 @@ plugins {
     id 'java-library'
     id 'maven-publish'
     id "signing"
+    id 'io.github.gradle-nexus.publish-plugin' version '2.0.0'
 }
 
 def getProperty = { property ->
@@ -24,7 +25,7 @@ repositories {
 }
 
 group = "com.pusher"
-version = "1.3.5"
+version = "1.3.6"
 description = "Pusher HTTP Client"
 
 // Netty version override to address CVE-2025-24970, CVE-2025-25193, CVE-2025-55163,
@@ -129,15 +130,15 @@ publishing {
             }
         }
     }
+}
+
+nexusPublishing {
     repositories {
-        maven {
-            def releaseRepositoryUrl = "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
-            def snapshotRepositoryUrl = "https://oss.sonatype.org/content/repositories/snapshots/"
-            url = version.endsWith("SNAPSHOT") ? snapshotRepositoryUrl : releaseRepositoryUrl
-            credentials {
-                username = findProperty("maven.username") ?: ""
-                password = findProperty("maven.password") ?: ""
-            }
+        sonatype {
+            nexusUrl.set(uri("https://ossrh-staging-api.central.sonatype.com/service/local/"))
+            snapshotRepositoryUrl.set(uri("https://central.sonatype.com/repository/maven-snapshots/"))
+            username = findProperty("sonatypeUsername") ?: ""
+            password = findProperty("sonatypePassword") ?: ""
         }
     }
 }