fix(workflow): usar MAVEN_GPG_PASSPHRASE em vez de -Dgpg.passphrase

O maven-gpg-plugin recomenda usar a variável de ambiente
MAVEN_GPG_PASSPHRASE em vez do parâmetro -Dgpg.passphrase
que está deprecated e pode causar problemas de segurança.

Author: edsonmartins

.github/workflows/publish-maven-central.yml

@@ -68,14 +68,12 @@ jobs:
           echo "GPG_TTY=$GPG_TTY"
           mvn clean deploy -Pmaven-central -DskipTests \
             -s .maven-settings.xml.template \
-            -Dgpg.passphrase=${{ secrets.GPG_PASSPHRASE }} \
             -Dgpg.pinentry-mode=loopback \
-            -Dgpg.batch=true \
-            -X
+            -Dgpg.batch=true
         env:
           MAVEN_USERNAME: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
           MAVEN_CENTRAL_TOKEN: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v1

.maven-settings.xml.template

@@ -15,8 +15,6 @@
             <id>gpg</id>
             <properties>
                 <gpg.executable>gpg</gpg.executable>
-                <gpg.passphrase>${env.GPG_PASSPHRASE}</gpg.passphrase>
-                <gpg.keyname>BEFBA859508A8489</gpg.keyname>
             </properties>
         </profile>
     </profiles>