migrate from (meanwhile shut down) OSSRH to Central Publisher Portal using the Portal OSSRH Staging API

cf. https://central.sonatype.org/news/20250326_ossrh_sunset/,
    https://central.sonatype.org/publish/publish-portal-ossrh-staging-api/
and https://central.sonatype.org/publish/publish-portal-api/#manually-testing-a-deployment-bundle

As the snapshots repository is currently not used,
its configuration is just a best guess at this point.

Signed-off-by: Manfred Hanke <Manfred.Hanke@tngtech.com>

Author: hankem

archunit-maven-test/build.gradle

@@ -16,8 +16,8 @@ def repositoryUrls = [
                 releases : 'https://nexus.int.tngtech.com/repository/maven-releases'
         ],
         sonatype: [
-                snapshots: 'https://oss.sonatype.org/content/repositories/snapshots',
-                releases : 'https://oss.sonatype.org/content/repositories/releases'
+                snapshots: 'https://central.sonatype.com/repository/maven-snapshots',
+                releases : 'https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/'
         ]
 ]
 def createRepositoriesTag = { repoUrls ->

build-steps/release/publish.gradle

@@ -7,6 +7,8 @@ nexusPublishing {
     packageGroup = 'com.tngtech'
     repositories {
         sonatype {
+            nexusUrl.set(uri("https://ossrh-staging-api.central.sonatype.com/service/local/"))
+            snapshotRepositoryUrl.set(uri("https://central.sonatype.com/repository/maven-snapshots/"))
             username = findProperty("sonatypeUsername")
             password = findProperty("sonatypePassword")
         }

build-steps/release/test-release.gradle

@@ -9,15 +9,22 @@ task testRelease() {
             text = text.replace('mavenCentral()', '''
             mavenCentral()
             maven {
-                url "https://oss.sonatype.org/content/repositories/staging/"
-                credentials {
-                    username project.getProperty('sonatypeUsername')
-                    password project.getProperty('sonatypePassword')
+                url "https://central.sonatype.com/api/v1/publisher/deployments/download/"
+                credentials(HttpHeaderCredentials) {
+                    name = "Authorization"
+                    value = "Bearer " + (project.getProperty('sonatypeUsername') + ":" + project.getProperty('sonatypePassword')).bytes.encodeBase64()
+                }
+                authentication {
+                    header(HttpHeaderAuthentication)
                 }
             }''')
         }
     }
 
+    def configureHttpSocketTimeout = {
+        new File(testReleaseDir, 'gradle.properties') << 'systemProp.org.gradle.internal.http.socketTimeout=600000\n'
+    }
+
     def testExampleProject = { String exampleProjectName ->
         List<String> testClassNames = fileTree(new File(testReleaseDir, exampleProjectName)) {
             include '**/*Test.java'
@@ -47,6 +54,7 @@ task testRelease() {
         updateArchUnitExampleVersion(testReleaseDir)
 
         configureStagingRepository()
+        configureHttpSocketTimeout()
 
         testExampleProject('example-plain')
         testExampleProject('example-junit4')

buildSrc/src/main/groovy/archunit.java-release-check-conventions.gradle

@@ -38,23 +38,25 @@ ext.getExpectedPomFileContent = {
 
 task checkUploadedArtifacts {
     doLast {
-        def tngRepoId = project.findProperty('tngRepoId') ?: rootProject.closeSonatypeStagingRepository.stagingRepositoryId.get()
-        def rootUrl = "https://oss.sonatype.org/service/local/repositories/${tngRepoId}/content/com/tngtech/archunit"
-
-        def createArtifactUrl = { String artifactId ->
-            "${rootUrl}/${artifactId}/${version}/${artifactId}-${version}"
+        def getArtifact = { String artifactId, String fullEnding ->
+            def repositoryUrl = 'https://central.sonatype.com/api/v1/publisher/deployments/download'
+            def artifactUrl = "$repositoryUrl/com/tngtech/archunit/$artifactId/$version/$artifactId-$version$fullEnding"
+            def connection = new URL(artifactUrl).openConnection()
+            def token = (project.getProperty('sonatypeUsername') + ':' + project.getProperty('sonatypePassword')).bytes.encodeBase64()
+            connection.setRequestProperty("Authorization", "Bearer $token")
+            return connection.inputStream
         }
 
         def getUploadedFile = { String artifactId, String ending, String suffix ->
             def fullEnding = (!suffix.isEmpty() ? "-${suffix}" : '') + ".${ending}"
             def tempDir = Files.createTempDirectory('release-check').toFile()
             File result = new File(tempDir, "${artifactId}${fullEnding}")
-            result.bytes = new URL("${createArtifactUrl(artifactId)}${fullEnding}").bytes
+            result.bytes = getArtifact(artifactId, fullEnding).bytes
             result
         }
 
         def getUploadedPomFileContent = {
-            new URL("${createArtifactUrl(project.name)}.pom").text.stripIndent()
+            getArtifact(project.name, ".pom").text.stripIndent()
         }
 
         def checkPom = {