From 46e5c09e1b1525b4c1ffffb9a4d19571cf876a32 Mon Sep 17 00:00:00 2001
From: Shai Almog <67850168+shai-almog@users.noreply.github.com>
Date: Fri, 10 Jul 2026 09:46:29 +0300
Subject: [PATCH] Fix release CI: bump certificatewizard poms to release
 version
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The release-on-maven-central workflow's "Deploy Signing Wizard editor"
step failed with 403 Forbidden because update-version.sh never bumped
the scripts/certificatewizard poms off 8.0-SNAPSHOT. mvn deploy therefore
targeted the Central *snapshots* repository, which the release job has no
rights to publish to.

The Game Builder editor (scripts/gamebuilder) — same out-of-reactor,
own-coordinates shape — was already handled; certificatewizard was added
later without the matching wiring. Mirror the gamebuilder block: rewrite
the three module versions plus the cn1.version/cn1.plugin.version the
editor builds against, and git add the tree before committing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 maven/update-version.sh | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/maven/update-version.sh b/maven/update-version.sh
index 396411f2f38..d0a1e08d116 100755
--- a/maven/update-version.sh
+++ b/maven/update-version.sh
@@ -82,11 +82,31 @@ if [ -f "$gbParent" ]; then
   perl -pi -e "s{<cn1\.plugin\.version>\Q$oldVersion\E</cn1\.plugin\.version>}{<cn1.plugin.version>$version</cn1.plugin.version>}g" "$gbParent"
 fi
 
+# Signing/Certificate Wizard editor (scripts/certificatewizard) is the same
+# shape as the Game Builder above: an out-of-reactor Codename One desktop app
+# with its own coordinates that the release workflow deploys to Central. If its
+# module version is not bumped to the release version it stays 8.0-SNAPSHOT, so
+# `mvn deploy` targets the Central *snapshots* repo and fails with 403 Forbidden
+# (the release job has no snapshot-publish rights). Rewrite its module version
+# plus the cn1.version/cn1.plugin.version it builds against, matching the
+# gamebuilder handling.
+for f in ../scripts/certificatewizard/pom.xml \
+         ../scripts/certificatewizard/common/pom.xml \
+         ../scripts/certificatewizard/javase/pom.xml; do
+  [ -f "$f" ] && perl -pi -e "s{<version>\Q$oldVersion\E</version>}{<version>$version</version>}g" "$f"
+done
+cwParent=../scripts/certificatewizard/pom.xml
+if [ -f "$cwParent" ]; then
+  perl -pi -e "s{<cn1\.version>\Q$oldVersion\E</cn1\.version>}{<cn1.version>$version</cn1.version>}g" "$cwParent"
+  perl -pi -e "s{<cn1\.plugin\.version>\Q$oldVersion\E</cn1\.plugin\.version>}{<cn1.plugin.version>$version</cn1.plugin.version>}g" "$cwParent"
+fi
+
 echo "Committing version change in git"
 git add -u .
 # Note: the -u is to prevent adding files that aren't added to git yet.  Only changed
 # files.  This is to help avoid accidents.
 git add -u ../scripts/gamebuilder
+git add -u ../scripts/certificatewizard
 git commit -m "Updated version to $version"
 if [[ "$version" == *-SNAPSHOT ]]; then
   echo "This is a snapshot version so not adding a tag"