Jenkins ee4j.data forbidden upload to sonatype

Summary

Attempting to deploy an artifact to sonatype is rejected after recent update of gpg keys. See related issue: #6316 (closed)

Steps to reproduce

This can be replicated by running the following jenkins job: https://ci.eclipse.org/data/view/CI%20Builds/job/jakarta-data-deploy/

What is the current bug behavior?

After an artifact is signed we attempt to deploy the artifact to a sonatype staging repository. The deploy task fails and a forbidden error code is returned.

What is the expected correct behavior?

We should be able to successfully deploy and artifact to sonatype with the provided gpg keys.

Relevant logs and/or screenshots

[INFO] --- gpg:3.2.7:sign (sign-artifacts) @ jakarta.data-api ---
[WARNING] 
[WARNING] W A R N I N G
[WARNING] 
[WARNING] Do not store passphrase in any file (disk or SCM repository),
[WARNING] instead rely on GnuPG agent or provide passphrase in 
[WARNING] MAVEN_GPG_PASSPHRASE environment variable for batch mode.
[WARNING] 
[WARNING] Sensitive content loaded from settings.xml
[WARNING] 
[INFO] Signer 'gpg' is signing 6 files with key default
...
[INFO] --- nexus-staging:1.7.0:deploy (injected-nexus-deploy) @ jakarta.data-api ---
[INFO] Performing deferred deploys (gathering into "/home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred")...
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT.jar to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT.jar
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/pom.xml to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT.pom
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/bom.xml to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-cyclonedx.xml
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/bom.json to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-cyclonedx.json
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT-sources.jar to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-sources.jar
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT-javadoc.jar to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-javadoc.jar
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT.jar.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT.jar.asc
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT.pom.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT.pom.asc
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/bom.xml.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-cyclonedx.xml.asc
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/bom.json.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-cyclonedx.json.asc
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT-sources.jar.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-sources.jar.asc
[INFO] Installing /home/jenkins/agent/workspace/jakarta-data-deploy/api/target/jakarta.data-api-1.1.0-SNAPSHOT-javadoc.jar.asc to /home/jenkins/agent/workspace/jakarta-data-deploy/target/nexus-staging/deferred/jakarta/data/jakarta.data-api/1.1.0-SNAPSHOT/jakarta.data-api-1.1.0-SNAPSHOT-javadoc.jar.asc
...
[ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging-maven-plugin:1.7.0:deploy (injected-nexus-deploy) on project jakarta.data-tck-dist: Failed to deploy artifacts: Could not transfer artifact jakarta.data:jakarta.data-api:json.asc:cyclonedx:1.1.0-20250624.180534-8 from/to ossrh (https://jakarta.oss.sonatype.org/content/repositories/snapshots/): status code: 403, reason phrase: Forbidden (403) -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :jakarta.data-tck-dist

Priority

• Urgent
• High
• Medium
• Low

Severity

• Blocker
• Major
• Normal
• Low

Impact

We are working on publishing a service release for Jakarta Data and this is blocking our ability to do so.