MOSIP-43872 Update maven-gpg-plugin version to 3.2.8

[kameshsr]

Summary by CodeRabbit

• Chores
  • Updated build configuration dependency to a specified version for consistency and stability.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

Added an explicit version element (3.2.8) to the maven-gpg-plugin declaration in the project's pom.xml file. No functional changes to plugin behavior or execution; the signing configuration remains unchanged.

Changes

Cohort / File(s)	Summary
Maven Plugin Version Declaration resident/pom.xml	Added explicit version 3.2.8 to maven-gpg-plugin configuration

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

• Single-line version addition with no logic or configuration behavior changes
• Straightforward verification that the pinned version is appropriate and available

Poem

🐰 A version pinned down with care so bright,
The GPG plugin now shines in the light,
No secrets to sign, no mysteries to keep,
Just Maven and rabbits, sleeping so deep! 🔐

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change: updating maven-gpg-plugin version to 3.2.8 in pom.xml, which is the sole modification in this changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch kameshsr-patch-8

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 4b1be11 and 50eed29.

📒 Files selected for processing (1)

• resident/pom.xml (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: Analyze (actions)
• GitHub Check: Analyze (java-kotlin)

🔇 Additional comments (1)

resident/pom.xml (1)

210-229: LGTM! Version update is safe and recommended.

Version 3.2.8 is stable and has zero active CVE issues. This version includes bug fixes, specifically making empty classifier null rather than empty string. The Maven GPG Plugin documentation published on 2025-06-28 lists 3.2.8 as the current stable version.

The configuration with loopback pinentry mode is well-documented and continues to work as intended with this version.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}