chore: sign the released scala nightlies now

Author: hamzaremmal

.github/workflows/release-maven-artifacts.yml

@@ -22,13 +22,19 @@ jobs:
           java-version: 17
           cache: 'sbt'
       - uses: sbt/setup-sbt@v1
+      - name: Import Scala PGP Key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.SCALA_PGP_KEY }}
+          passphrase: ${{ secrets.SCALA_PGP_PASSPHRASE }}
       - name: Publish Artifacts to the Maven Repository
-        run : sbt scala3-bootstrapped-new/publish
+        run : sbt scala3-bootstrapped-new/publishSigned
         env:
           MAVEN_REPOSITORY_USER : ${{ secrets.MAVEN_REPOSITORY_USER }}
           MAVEN_REPOSITORY_TOKEN: ${{ secrets.MAVEN_REPOSITORY_TOKEN }}
           MAVEN_REPOSITORY_HOST : ${{ vars.MAVEN_REPOSITORY_HOST }}
           MAVEN_REPOSITORY_REALM: ${{ vars.MAVEN_REPOSITORY_REALM }}
           MAVEN_REPOSITORY_URL  : ${{ vars.MAVEN_REPOSITORY_URL }}
+          SCALA_PGP_PASSPHRASE  : ${{ vars.SCALA_PGP_PASSPHRASE }}
           NEWNIGHTLY            : ${{ vars.NEWNIGHTLY }}
           NIGHTLYBUILD          : ${{ vars.NIGHTLYBUILD }}

project/Build.scala

@@ -335,7 +335,7 @@ object Build {
         password <- sys.env.get("SONATYPE_PW")
       } yield Credentials("Sonatype Nexus Repository Manager", "central.sonatype.com", username, password)
     ).toList,
-    PgpKeys.pgpPassphrase := sys.env.get("PGP_PW").map(_.toCharArray()),
+    PgpKeys.pgpPassphrase := sys.env.get("SCALA_PGP_PASSPHRASE").map(_.toCharArray()),
     PgpKeys.useGpgPinentry := true,
 
     // Do not cut off the bottom of large stack traces (default is 1024)