This commit is contained in:
usbharu 2024-11-17 20:22:46 +09:00
parent e53a7cc42e
commit 4ac13468b2
Signed by: usbharu
GPG Key ID: 95CBCF7046307B77
6 changed files with 8 additions and 504 deletions

View File

@ -186,7 +186,7 @@
same "printed page" as the copyright notice for easier
identification within third-party archives.
Copyright 2023 JetBrains s.r.o. and and respective authors and developers.
Copyright 2024 usbharu
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.

482
README.md
View File

@ -1,482 +1,4 @@
[![official project](http://jb.gg/badges/official.svg)](https://github.com/JetBrains#jetbrains-on-github)
# Markdown-kt
# Multiplatform library template
Kotlin MultiplatformなMarkdownパーサ
## What is it?
***abc**d**e**f*
This repository contains a simple library project, intended to demonstrate
a [Kotlin Multiplatform](https://kotlinlang.org/docs/multiplatform.html) library that is deployable
to [Maven Central](https://central.sonatype.com/).
The library has only one function: generate the [Fibonacci sequence](https://en.wikipedia.org/wiki/Fibonacci_sequence)
starting from platform-provided numbers. Also, it has a test for each platform just to be sure that tests run.
Note that no other actions or tools usually required for the library development are set up, such
as [tracking of backwards compatibility](https://kotlinlang.org/docs/jvm-api-guidelines-backward-compatibility.html#tools-designed-to-enforce-backward-compatibility),
explicit API mode, licensing, contribution guideline, code of conduct and others. You can find a guide for best
practices for designing Kotlin libraries [here](https://kotlinlang.org/docs/api-guidelines-introduction.html).
## How to publish?
This guide describes the steps of publishing a library built with Kotlin Multiplatform to
the [Maven Central repository](https://central.sonatype.com/). To publish your library, youll need to:
* Set up credentials, including an account on Maven Central and a PGP key to use for signing.
* Configure the publishing plugin in your librarys project.
* Provide your credentials to the publishing plugin so it can sign and upload your artifacts.
* Run the publication task, either locally or using continuous integration.
This guide assumes that you are:
- Creating an open-source library.
- Using macOS or Linux. If you are a Windows user, use [GnuPG or Gpg4win](https://gnupg.org/download) to generate a key
pair.
- Either not registered on Maven Central yet, or have an existing account thats suitable
for [publishing to the Central Portal](https://central.sonatype.org/publish-ea/publish-ea-guide/) (created after March
12th, 2024, or migrated to the Central Portal by their support).
- Publishing your library in a GitHub repository.
- Using GitHub Actions for continuous integration.
Most of the steps here are still applicable if youre using a different setup, but there might be some differences you
need to account for.
An [important limitation](https://kotlinlang.org/docs/multiplatform-publish-lib.html#host-requirements) is that Apple
targets must be built on a machine with macOS.
Throughout this guide, well use
the [https://github.com/kotlin-hands-on/fibonacci](https://github.com/kotlin-hands-on/fibonacci) repository as an
example. You can refer to the code of this repository to see how the publishing setup works. You **must replace all
example values with your own** as youre configuring your project.
### Prepare accounts and credentials
#### Register a namespace
Artifacts published to Maven repositories are identified by their coordinates, for example `com.example:library:1.0.0`.
These coordinates are made up of three parts, separated by colons: the `groupId`, `artifactId`, and `version`.
As a first step for publishing to Maven Central, youll need to have a verified namespace. The `groupId` of the
artifacts you publish will have to start with the name of your verified namespace. For example, if you register the
`com.example` namespace, youll be able to publish artifacts with the `groupId` set to `com.example` or
`com.example.libraryname`.
To get started with publishing to Maven Central, sign in (or create a new account) on
the [Maven Central](https://central.sonatype.com/) portal. Once signed in, navigate
to [Namespaces](https://central.sonatype.com/publishing/namespaces) under your profile, and click the Add Namespace
button. Here, you can register a namespace for your artifacts, either based on your GitHub account or a domain name that
you own.
**For a GitHub repository**
Using your GitHub account to create a namespace is a good option if you dont own a domain name to use for publication.
To create a namespace based on your GitHub account:
1. Enter `io.github.<your username>` as your namespace. For example, `io.github.kotlin-hands-on`.
2. Copy the Verification Key displayed.
3. On GitHub, create a new repository with your GitHub account with the verification key as the repositorys name. For
example, `http://github.com/kotlin-hands-on/ex4mpl3c0d`.
4. Navigate back to Maven Central, and click on the Verify Namespace button. After verification succeeds you can delete
the repository youve created.
**For a domain name**
To use a domain name that you own as your namespace:
1. Enter your domain as the namespace using a reverse-DNS form. If your domain is `example.com`, enter `com.example`.
2. Copy the Verification Key displayed.
3. Create a new DNS TXT record with the verification key as its contents.
See [Maven Centrals FAQ](https://central.sonatype.org/faq/how-to-set-txt-record/) for more information on how to do
this with various domain registrars.
4. Navigate back to Maven Central, and click on the Verify Namespace button. After verification succeeds you can delete
the TXT record youve created.
#### Generate a Key Pair
Artifacts published to Maven
Central [must be signed with a PGP signature](https://central.sonatype.org/publish/requirements/gpg/), which allows
users to validate the origin of artifacts.
To get started with signing, youll need to generate a key pair:
* The **private key** is used to sign your artifacts, and should never be shared with others.
* The **public key** can be used by others to validate the signature of the artifacts, and should be published.
The `gpg` tool that can manage signatures for you is available
from [their website](https://gnupg.org/download/index.html). You can also install it using package managers such
as [Homebrew](https://brew.sh/):
```bash
brew install gpg
```
Generate a key pair with the following command, and fill in the required details when prompted.
```bash
gpg --full-generate-key
```
Choose the recommended defaults for the type of key to be created. You can leave these selections empty and press Enter
to accept the default values.
> [!NOTE]
> At the time of writing, this is `ECC (sign and encrypt)` with `Curve 25519`. Older versions of `gpg` might default to
`RSA` with a `3072` bit key size.
Next, youll be prompted to set the expiration of the key. If you choose to create a key that automatically expires
after a set amount of time, youll need
to [extend its validity](https://central.sonatype.org/publish/requirements/gpg/#dealing-with-expired-keys) when it
expires.
You will be asked for your real name, email, and a comment. You can leave the comment empty.
```text
Please select what kind of key you want:
(1) RSA and RSA
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
(9) ECC (sign and encrypt) *default*
(10) ECC (sign only)
(14) Existing key from card
Your selection? 9
Please select which elliptic curve you want:
(1) Curve 25519 *default*
(4) NIST P-384
(6) Brainpool P-256
Your selection? 1
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0) 0
Key does not expire at all
Is this correct? (y/N) y
GnuPG needs to construct a user ID to identify your key.
```
You will be asked for a passphrase to encrypt the key, which you have to repeat. Keep this passphrase stored securely
and privately. Youll be using it later to access the private key.
Lets take a look at the key weve created with the following command:
```bash
gpg --list-keys
```
The output will look something like this:
```text
pub ed25519 2024-10-06 [SC]
F175482952A225BFC4A07A715EE6B5F76620B385CE
uid [ultimate] Your name <your email address>
sub cv25519 2024-10-06 [E]
```
Youll need to use the long alphanumerical identifier of your key displayed here in the following steps.
#### Upload the public key
You need
to [upload the public key to a keyserver](https://central.sonatype.org/publish/requirements/gpg/#distributing-your-public-key)
for it to be accepted by Maven Central. There are multiple available keyservers, well use `keyserver.ubuntu.com` as a
default choice.
Run the following command to upload your public key using `gpg`, **substituting your own keyid** in the parameters:
```bash
gpg --keyserver keyserver.ubuntu.com --send-keys F175482952A225BFC4A07A715EE6B5F76620B385CE
```
#### Export your private key
To let your Gradle project access your private key, youll need to export it to a file. Use the following command, *
*passing in your own keyid** as a parameter. You will be prompted to enter the passphrase youve used when creating the
key.
```bash
gpg --armor --export-secret-keys F175482952A225BFC4A07A715EE6B5F76620B385CE > key.gpg
```
This will create a `key.gpg` file which contains your private key.
> [!CAUTION]
> Never share a private key with anyone.
If you check the contents of the file, you should see contents similar to this:
```text
-----BEGIN PGP PRIVATE KEY BLOCK-----
lQdGBGby2X4BEACvFj7cxScsaBpjty60ehgB6xRmt8ayt+zmgB8p+z8njF7m2XiN
...
bpD/h7ZI7FC0Db2uCU4CYdZoQVl0MNNC1Yr56Pa68qucadJhY0sFNiB63KrBUoiO
-----END PGP PRIVATE KEY BLOCK-----
```
#### Generate the user token
Your project will also need to authenticate with Maven Central to upload artifacts. On the Central Portal, navigate to
the [Account](https://central.sonatype.com/account) page, and click on *Generate User Token*.
The output will look like the example below, containing a username and a password. Store this information securely, as
it cant be viewed again on the Central Portal. If you lose these credentials, youll need to generate new ones later.
```xml
<server>
<id>${server}</id>
<username>l3nfaPmz</username>
<password>gh9jT9XfnGtUngWTZwTu/8241keYdmQpipqLPRKeDLTh</password>
</server>
```
### Configure the project
#### Prepare your library project
If you started developing your library from a template project, this is a good time to change any default names in the
project to match your own librarys name. This includes the name of your library module, and the name of the root
project in your top-level `build.gradle.kts` file.
If you have an Android target in your project, you should follow
the [steps to prepare your Android library release](https://developer.android.com/build/publish-library/prep-lib-release).
This, at a minimum, requires you
to [specify an appropriate namespace](https://developer.android.com/build/publish-library/prep-lib-release#choose-namespace)
for your library, so that a unique R class will be generated when their resources are compiled. Notice that the
namespace is different from the Maven namespace created in the [Register a namespace](#register-a-namespace) section
above.
```kotlin
// build.gradle.kts
android {
namespace = "io.github.kotlinhandson.fibonacci"
}
```
#### Set up the publishing plugin
This guide uses [vanniktech/gradle-maven-publish-plugin](https://github.com/vanniktech/gradle-maven-publish-plugin) to
help with publications to Maven Central. You can read more about the advantages of the
plugin [here](https://vanniktech.github.io/gradle-maven-publish-plugin/#advantages-over-maven-publish). See
the [plugins documentation](https://vanniktech.github.io/gradle-maven-publish-plugin/central/) to learn more about its
usage and available configuration options.
To add the plugin to your project, add the following line in the plugins block, in your library modules
`build.gradle.kts` file:
```kotlin
// build.gradle.kts
plugins {
id("com.vanniktech.maven.publish") version "0.29.0"
}
```
*Note: for the latest available version of the plugin, check
its [releases page](https://github.com/vanniktech/gradle-maven-publish-plugin/releases).*
In the same file, add the following configuration. Customize all these values appropriately for your library.
```kotlin
// build.gradle.kts
mavenPublishing {
publishToMavenCentral(SonatypeHost.CENTRAL_PORTAL)
signAllPublications()
coordinates(group.toString(), "fibonacci", version.toString())
pom {
name = "Fibonacci library"
description = "A mathematics calculation library."
inceptionYear = "2024"
url = "https://github.com/kotlin-hands-on/fibonacci/"
licenses {
license {
name = "The Apache License, Version 2.0"
url = "https://www.apache.org/licenses/LICENSE-2.0.txt"
distribution = "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
developers {
developer {
id = "kotlin-hands-on"
name = "Kotlin Developer Advocate"
url = "https://github.com/kotlin-hands-on/"
}
}
scm {
url = "https://github.com/kotlin-hands-on/fibonacci/"
connection = "scm:git:git://github.com/kotlin-hands-on/fibonacci.git"
developerConnection = "scm:git:ssh://git@github.com/kotlin-hands-on/fibonacci.git"
}
}
}
```
Note that its also possible to use Gradle properties instead.
Some of the most important, required settings here are:
* The `coordinates`, which specify the `groupId`, `artifactId`, and `version` of your library.
* The [license](https://central.sonatype.org/publish/requirements/#license-information) that youre publishing your
library under.
* The [developer information](https://central.sonatype.org/publish/requirements/#developer-information) which lists the
authors of the library.
* [SCM (Source Code Management) information](https://central.sonatype.org/publish/requirements/#scm-information), which
specifies where the sources of your library are available.
### Publish to Maven Central from Continuous Integration
#### Add a GitHub Actions workflow to your project
You can set up continuous integration which builds and publishes your library for you. Well
use [GitHub Actions](https://docs.github.com/en/actions) as an example.
To get started, add the following workflow to your repository, in the `.github/workflows/publish.yml` file.
```yaml
# .github/workflows/publish.yml
name: Publish
on:
release:
types: [ released, prereleased ]
jobs:
publish:
name: Release build and publish
runs-on: macOS-latest
steps:
- name: Check out code
uses: actions/checkout@v4
- name: Set up JDK 21
uses: actions/setup-java@v4
with:
distribution: 'zulu'
java-version: 21
- name: Publish to MavenCentral
run: ./gradlew publishToMavenCentral --no-configuration-cache
env:
ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.SIGNING_KEY_ID }}
ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.GPG_KEY_CONTENTS }}
```
After committing and pushing this change, this workflow will run automatically when you create a release (including a
pre-release) in the GitHub repository hosting your project. It checks out the current version of your code, sets up a
JDK, and then runs the `publishToMavenCentral` Gradle task.
> [!NOTE]
> Alternatively, you could configure the workflow
> to [trigger when a tag is pushed](https://stackoverflow.com/a/61892639) to your repository.
>
> The script above disables
> Gradle [configuration cache](https://docs.gradle.org/current/userguide/configuration_cache.html) for the publication
> task by adding `--no-configuration-cache` to the Gradle command, as the publication plugin does not support it (see
> this [open issue](https://github.com/gradle/gradle/issues/22779)).
>
> Reminder: When using `publishToMavenCentral`, youll still need to check and release your deployment manually on the
> website, as described in the previous section. You may use `publishAndReleaseToMavenCentral` instead for a fully
> automated release.
This action will need your signing details and your Maven Central credentials. These will be configured as GitHub
Actions secrets in the next section. The configuration of the workflow above takes these secrets and places them into
environment variables, which will make them available to the Gradle build automatically.
### Add secrets to GitHub
To use the keys and credentials required for publication in your GitHub Action workflow while keeping them private, you
need to place those values into secrets. From your GitHub repository, go to `Settings` \>
`(Security) Secrets and variables > Actions`.
Click on the `New repository secret` button, and add the following secrets:
- `MAVEN_CENTRAL_PASSWORD` and `MAVEN_CENTRAL_PASSWORD` are the values generated by the Central Portal website in
the [Generate User Token](#generate-the-user-token) section.
- `SIGNING_KEY_ID` is **the last 8 characters** of your signing keys identifier.
- `SIGNING_PASSWORD` is the passphrase youve provided when generating your signing key.
- `GPG_KEY_CONTENTS` should contain the contents of your GPG private key file, which youve created earlier in
the [Export your private key](#export-your-private-key) section.
![](/images/github_secrets.png)
Note again that the names used for these secrets must match those used by the workflow that accesses their values.
#### Create a release on GitHub
With the workflow and secrets set up, youre now ready
to [create a release](https://docs.github.com/en/repositories/releasing-projects-on-github/managing-releases-in-a-repository#creating-a-release)
that will trigger the publication of your library.
Go to your GitHub repositorys main page, and click on Releases in the menu in the right sidebar.
![](/images/github_releases.png)
Click *Draft a new release*.
![](/images/draft_release.png)
Each release creates a new tag. Set the name for the tag to be created, and set a name for the release (these may be
identical). Note that setting a version here does not change the version of your coordinates configured in your
`build.gradle.kts` file, so you should update that version before creating a new release.
![](/images/create_release_and_tag.png)
Double-check the branch you want to target with the release (especially if you want to release from a branch thats
different from your default), and add appropriate release notes for your new version.
The checkboxes below allow you to mark a release as a pre-release (useful for alpha, beta, or RC versions of a library),
or to set the release as the latest available one:
![](/images/release_settings.png)
Click the *Publish release* button to create the new release. This will immediately show up on your GitHub repositorys
main page.
Click the Actions tab on the top of your GitHub repository. Here youll see the new workflow was triggered by the GitHub
release. Click it to see the outputs of the publication task.
After this task completes successfully, navigate to
the [Deployments](https://central.sonatype.com/publishing/deployments) dashboard. You should see a new deployment here.
This deployment will be in the *pending* and *validating* states for some time while Maven Central performs checks on
it.
Once your deployment moves to a *validated* state, you should see that it contains all the artifacts youve uploaded. If
everything looks correct, click the *Publish* button to release these artifacts.
![](/images/published_on_maven_central.png)
Note that it will take some time (about 1530 minutes, usually) after the release for the artifacts to be available
publicly on Maven Central.
Also note that the library may be available for use before they are indexed
on [the Maven Central website](https://central.sonatype.com/).
Theres also another task available which both uploads and releases the artifacts automatically once the deployment is
verified, without having to manually release them on the website:
```bash
./gradlew publishAndReleaseToMavenCentral
```
**Et voilà, you have successfully published your library to Maven Central.**
# Next steps
- Share your library with the Kotlin Community in the `#feed` channel in
the [Kotlin Slack](https://kotlinlang.slack.com/) (To sign up visit https://kotl.in/slack.)
- Add [shield.io badges](https://shields.io/badges/maven-central-version) to your README.
- Create a documentation site for your project using [Writerside](https://www.jetbrains.com/writerside/).
- Share API documentation for your project using [Dokka](https://kotl.in/dokka).
- Add [Renovate](https://docs.renovatebot.com/) to automatically update dependencies.
# Other resources
* [Publishing via the Central Portal](https://central.sonatype.org/publish-ea/publish-ea-guide/)
* [Gradle Maven Publish Plugin \- Publishing to Maven Central](https://vanniktech.github.io/gradle-maven-publish-plugin/central/)

View File

@ -9,7 +9,7 @@ plugins {
alias(libs.plugins.vanniktech.mavenPublish)
}
group = "io.github.kotlin"
group = "dev.usbharu"
version = "1.0.0"
kotlin {
@ -49,7 +49,7 @@ kotlin {
}
android {
namespace = "org.jetbrains.kotlinx.multiplatform.library.template"
namespace = "dev.usbharu.markdown"
compileSdk = libs.versions.android.compileSdk.get().toInt()
defaultConfig {
minSdk = libs.versions.android.minSdk.get().toInt()
@ -61,11 +61,11 @@ mavenPublishing {
signAllPublications()
coordinates(group.toString(), "library", version.toString())
coordinates(group.toString(), "markdown-kt", version.toString())
pom {
name = "My library"
description = "A library."
name = "markdown-kt"
description = "Kotlin Multiplatform markdown parser"
inceptionYear = "2024"
url = "https://github.com/kotlin/multiplatform-library-template/"
licenses {

View File

@ -1,4 +0,0 @@
package io.github.kotlin.fibonacci
actual val firstElement: Int = 3
actual val secondElement: Int = 4

View File

@ -1,12 +0,0 @@
package io.github.kotlin.fibonacci
import kotlin.test.Test
import kotlin.test.assertEquals
class IosFibiTest {
@Test
fun `test 3rd element`() {
assertEquals(7, generateFibi().take(3).last())
}
}

View File

@ -1,2 +0,0 @@
package io.github.kotlin.fibonacci