[ACS-12085] [release] Alfresco SDK 4.17.0-A2 alpha (#769 )

ACS-12085 Migrate SDK Repositories Verified Commits (#768 )
[ACS-11984]: Release Alfresco SDK 4.17.0-A1 (#763 ) (#766 )
2026-09-16 18:13:23 +00:00 · 2026-08-13 13:48:31 +05:30 · 2026-08-13 12:01:51 +05:30 · 2026-06-15 14:07:42 +05:30 · 2026-06-15 13:32:27 +05:30 · 2026-06-11 10:34:42 +02:00
9 changed files with 99 additions and 13 deletions
@@ -0,0 +1,7 @@
+env:
+  global:
+    # Both variables are required to be set before the release process starts.
+    # As the release is triggered by a commit message with "[release]" keyword,
+    # setting these variables to new values can be done in the same commit and will indicate the release and the dev versions in it.
+    - RELEASE_VERSION=4.17.0-A2
+    - DEVELOPMENT_VERSION=4.17.0-A3-SNAPSHOT
@@ -13,6 +13,9 @@ on:
      - feature/**
  workflow_dispatch:

+permissions:
+  contents: read
+
 env:
  JAVA_VERSION: '21'
  MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
@@ -20,6 +23,7 @@ env:
  MAVEN_CENTRAL_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
  MAVEN_CENTRAL_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}
  GITHUB_ACTIONS_DEPLOY_TIMEOUT: 90
+  # Note: RELEASE_VERSION and DEVELOPMENT_VERSION are loaded from .github/release-versions.yml

 jobs:
  pre_commit:
@@ -138,16 +142,69 @@ jobs:
      - name: "Build"
        run: mvn clean install -B ${{ matrix.suite }}

+  release:
+    name: "Release"
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    needs: [tests]
+    outputs:
+      release_tag: ${{ steps.release_meta.outputs.release_tag }}
+    env:
+      MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
+      MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+    if: >
+      needs.tests.result == 'success' &&
+      (github.ref_name == 'master' || startsWith(github.ref_name, 'fix/') || startsWith(github.ref_name, 'feature/')) &&
+      !contains(github.event.head_commit.message, '[no release]') &&
+      github.event_name != 'pull_request' &&
+      contains(github.event.head_commit.message, '[release]')
+    steps:
+      - name: "Generate GitHub App token"
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          client-id: ${{ vars.GH_APP_ENGINEERING_CONTRIB_CLIENT_ID }}
+          private-key: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
+          permission-contents: write
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          fetch-depth: 0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/env-load-from-yaml@v18.21.2
+        with:
+          yml_path: .github/release-versions.yml
+      - name: "Export release metadata"
+        id: release_meta
+        run: echo "release_tag=${RELEASE_VERSION}" >> "$GITHUB_OUTPUT"
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v18.21.2
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.2
+        with:
+          java-version: ${{ env.JAVA_VERSION }}
+      - uses: Alfresco/alfresco-build-tools/.github/actions/maven-release-slim@v18.21.2
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          release-version: ${{ env.RELEASE_VERSION }}
+          development-version: ${{ env.DEVELOPMENT_VERSION }}
+          maven-args: >
+            -DskipTests
+            -DbuildNumber=${{ github.run_number }}
+
  check_version:
    name: "Check version"
    runs-on: ubuntu-latest
-    needs: [tests]
+    needs: [tests, release]
    if: >
-      contains(github.event.head_commit.message, '[publish]')
+      needs.tests.result == 'success' &&
+      contains(github.event.head_commit.message, '[publish]') &&
+      (needs.release.result == 'success' || needs.release.result == 'skipped')
    outputs:
        is_ga: ${{ steps.publish_version.outputs.is_ga }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ needs.release.outputs.release_tag || github.ref }}
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
@@ -167,13 +224,19 @@ jobs:
  publish:
    name: "Publish artifacts"
    runs-on: ubuntu-latest
-    needs: [tests, check_version]
+    needs: [tests, check_version, release]
    if: >
-      contains(github.event.head_commit.message, '[publish]') && needs.check_version.outputs.is_ga == 'true'
+      needs.tests.result == 'success' &&
+      contains(github.event.head_commit.message, '[publish]') &&
+      needs.check_version.result == 'success' &&
+      needs.check_version.outputs.is_ga == 'true' &&
+      (needs.release.result == 'success' || needs.release.result == 'skipped')
    env:
      GPG_SIGNING_PASSPHRASE: ${{ secrets.GPG_SIGNING_PASSPHRASE }}
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ needs.release.outputs.release_tag || github.ref }}
      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v15.7.1
      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v15.7.1
        with:
@@ -11,7 +11,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.16.0</version>
+    <version>4.17.0-A2</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -12,7 +12,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.16.0</version>
+    <version>4.17.0-A2</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -14,7 +14,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.16.0</version>
+        <version>4.17.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -17,7 +17,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.16.0</version>
+        <version>4.17.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -10,7 +10,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.16.0</version>
+        <version>4.17.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -8,7 +8,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.16.0</version>
+        <version>4.17.0-A2</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -81,7 +81,7 @@
        <dependency>
            <groupId>org.apache.maven</groupId>
            <artifactId>maven-archiver</artifactId>
-            <version>3.6.0</version>
+            <version>3.6.6</version>
            <exclusions>
                <exclusion>
                    <artifactId>maven-core</artifactId>
@@ -92,7 +92,7 @@
        <dependency>
            <groupId>org.codehaus.plexus</groupId>
            <artifactId>plexus-archiver</artifactId>
-            <version>4.11.0</version>
+            <version>4.12.0</version>
        </dependency>
        <dependency>
            <groupId>org.apache.maven</groupId>
@@ -3,7 +3,7 @@
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.16.0</version>
+    <version>4.17.0-A2</version>
    <name>Alfresco SDK</name>
    <description>This aggregator Project builds all modules required for the Alfresco SDK</description>
    <packaging>pom</packaging>
@@ -449,6 +449,22 @@
        </profile>
    </profiles>

+    <!--
+        Date: 12-06-2026
+        Force transitive dependencies to safe versions.
+        Remove this when bumping the "alfresco-repository" 26.2 GA in the future,
+        as the fixed version of plexus-utils will be included in the dependency tree of the project.
+    -->
+    <dependencyManagement>
+        <dependencies>
+            <dependency>
+                <groupId>org.codehaus.plexus</groupId>
+                <artifactId>plexus-utils</artifactId>
+                <version>3.6.1</version>
+            </dependency>
+        </dependencies>
+    </dependencyManagement>
+
    <build>
        <pluginManagement>
            <plugins>
Author	SHA1	Message	Date
Somnath Deshmukh	89a7315905	[ACS-12085] [release] Alfresco SDK 4.17.0-A2 alpha (#769 )	2026-08-13 13:48:31 +05:30
Somnath Deshmukh	9037ad3545	ACS-12085 Migrate SDK Repositories Verified Commits (#768 )	2026-08-13 12:01:51 +05:30
Vivek Kumar	f65a3f0da1	[ACS-11984]: Release Alfresco SDK 4.17.0-A1 (#763 ) (#766 )	2026-06-15 14:07:42 +05:30
Vivek Kumar	ad020fe106	[ACS-11984]: Review security and quality findings on Alfresco SDK (#765 )	2026-06-15 13:32:27 +05:30
Gerard Olenski	2dfebc9b9e	ACS-12005 Remove Veracode integration (#764 )	2026-06-11 10:34:42 +02:00