build: Sign builds

.releaserc

@@ -32,7 +32,7 @@
       {
         "assets": [
           {
-            "path": "build/libs/*.jar"
+            "path": "build/libs/*"
           }
         ],
         successComment: false

Dockerfile

@@ -9,7 +9,7 @@ ENV GITHUB_TOKEN $GITHUB_TOKEN
 
 WORKDIR /app
 COPY . .
-RUN gradle publish --no-daemon
+RUN gradle startShadowScript --no-daemon
 
 # Build the runtime container
 FROM eclipse-temurin:latest

build.gradle.kts

@@ -2,6 +2,8 @@ plugins {
     alias(libs.plugins.kotlin)
     alias(libs.plugins.ktor)
     alias(libs.plugins.serilization)
+    `maven-publish`
+    signing
 }
 
 group = "app.revanced"
@@ -13,9 +15,8 @@ tasks {
 
     // Needed by gradle-semantic-release-plugin.
     // Tracking: https://github.com/KengoTODA/gradle-semantic-release-plugin/issues/435
-    register<DefaultTask>("publish") {
-        group = "publishing"
-        dependsOn(startShadowScripts)
+    publish {
+        dependsOn(shadowJar)
     }
 
     shadowJar {
@@ -81,3 +82,22 @@ dependencies {
     implementation(libs.revanced.library)
     implementation(libs.caffeine)
 }
+
+// The maven-publish plugin is necessary to make signing work.
+publishing {
+    repositories {
+        mavenLocal()
+    }
+
+    publications {
+        create<MavenPublication>("revanced-api-publication") {
+            from(components["java"])
+        }
+    }
+}
+
+signing {
+    useGpgCmd()
+
+    sign(publishing.publications["revanced-api-publication"])
+}