From 6b479d74a1c8d86d3581afe875383c897f05dd7c Mon Sep 17 00:00:00 2001
From: Lukas Rytz <lukas.rytz@gmail.com>
Date: Mon, 11 May 2015 14:34:00 +0200
Subject: [PATCH 1/3] Remove current travis publishing infrastructure

---
 .travis.yml           | 19 ++-----------------
 admin/build.sh        | 19 -------------------
 admin/decrypt.sh      |  2 --
 admin/encrypt.sh      |  2 --
 admin/encryptAll.sh   | 19 -------------------
 admin/gpg.sbt         | 21 ---------------------
 admin/pubring.asc     | 18 ------------------
 admin/secring.asc.enc | 40 ----------------------------------------
 8 files changed, 2 insertions(+), 138 deletions(-)
 delete mode 100755 admin/build.sh
 delete mode 100755 admin/decrypt.sh
 delete mode 100755 admin/encrypt.sh
 delete mode 100755 admin/encryptAll.sh
 delete mode 100644 admin/gpg.sbt
 delete mode 100644 admin/pubring.asc
 delete mode 100644 admin/secring.asc.enc

diff --git a/.travis.yml b/.travis.yml
index 33c33702f..f35a75d08 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,23 +1,8 @@
 language: scala
 
-env:
-  global:
-    - PUBLISH_JDK=openjdk6 # admin/build.sh only publishes when running on this jdk
-# Don't commit sensitive files, instead commit a version encrypted with $SECRET,
-# this environment variable is encrypted with this repo's private key and stored below:
-# (See http://docs.travis-ci.com/user/environment-variables/#Secure-Variables.)
-    - secure: "whJQqI/7G+kUJoCCGQYbv3Y/T2Cx3EcBKfCyvMkZaVgo0wFEOUguh8I+4QqRyf9cC/uPmzwCzV9uwXsNDMcY78jouY05A+fCEnUol/9TuF5PWmXF6Yr/UmmYoCQe4pioXsbXa4uOy18kLzE0h2sOIrJ5A9NL8/58iVgl4E3pwvk="
-
-script:
-  - admin/build.sh
-scala:
-  - 2.11.4
+script: sbt clean update test publishLocal
 jdk:
   - openjdk6
   - openjdk7
 notifications:
-  email:
-    - adriaan.moors@typesafe.com
-
-# if we get weird timeouts, see https://github.com/spray/spray/pull/233
-# 'set concurrentRestrictions in Global += Tags.limit(Tags.Test, 1)'
+  email: adriaan.moors@typesafe.com
diff --git a/admin/build.sh b/admin/build.sh
deleted file mode 100755
index 3c7f4b6c8..000000000
--- a/admin/build.sh
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/bash
-
-# prep environment for publish to sonatype staging if the HEAD commit is tagged
-
-# git on travis does not fetch tags, but we have TRAVIS_TAG
-# headTag=$(git describe --exact-match ||:)
-
-if [ "$TRAVIS_JDK_VERSION" == "$PUBLISH_JDK" ] && [[ "$TRAVIS_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[A-Za-z0-9-]+)? ]]; then
-  echo "Going to release from tag $TRAVIS_TAG!"
-  myVer=$(echo $TRAVIS_TAG | sed -e s/^v//)
-  publishVersion='set every version := "'$myVer'"'
-  extraTarget="publish-signed"
-
-  cat admin/gpg.sbt >> project/plugins.sbt
-  admin/decrypt.sh sensitive.sbt
-  (cd admin/ && ./decrypt.sh secring.asc)
-fi
-
-sbt ++$TRAVIS_SCALA_VERSION "$publishVersion" clean update compile test $extraTarget
\ No newline at end of file
diff --git a/admin/decrypt.sh b/admin/decrypt.sh
deleted file mode 100755
index 3c3c602f0..000000000
--- a/admin/decrypt.sh
+++ /dev/null
@@ -1,2 +0,0 @@
-#!/bin/bash
-openssl aes-256-cbc -pass "pass:$SECRET" -in $1.enc -out $1 -d -a
\ No newline at end of file
diff --git a/admin/encrypt.sh b/admin/encrypt.sh
deleted file mode 100755
index 4bf6c9329..000000000
--- a/admin/encrypt.sh
+++ /dev/null
@@ -1,2 +0,0 @@
-#!/bin/bash
-openssl aes-256-cbc -pass "pass:$SECRET" -in $1 -out $1.enc -a
\ No newline at end of file
diff --git a/admin/encryptAll.sh b/admin/encryptAll.sh
deleted file mode 100755
index de7016b75..000000000
--- a/admin/encryptAll.sh
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/bash
-
-# Based on https://gist.github.com/kzap/5819745:
-
-echo "This will encrypt the cleartext sensitive.sbt and admin/secring.asc, while making the encrypted versions available for decryption on Travis."
-echo "Update your .travis.yml as directed, and delete the cleartext versions."
-echo "Press enter to continue."
-read
-
-# 1. create a secret, put it in an environment variable while encrypting files -- UNSET IT AFTER
-export SECRET=$(cat /dev/urandom | head -c 10000 | openssl sha1)
-
-# 2. add the "secure: ..." line under the env section -- generate it with ``  (install the travis gem first)
-travis encrypt SECRET=$SECRET
-
-admin/encrypt.sh admin/secring.asc
-admin/encrypt.sh sensitive.sbt
-
-echo "Remember to rm sensitive.sbt admin/secring.asc -- once you do, they cannot be recovered (except on Travis)!"
\ No newline at end of file
diff --git a/admin/gpg.sbt b/admin/gpg.sbt
deleted file mode 100644
index 6ec4213ea..000000000
--- a/admin/gpg.sbt
+++ /dev/null
@@ -1,21 +0,0 @@
-// only added when publishing:
-addSbtPlugin("com.typesafe.sbt" % "sbt-pgp" % "0.8.3")
-
-/* There's a companion sensitive.sbt, which was created like this:
-
-1. in an sbt shell when sbt-gpg is loaded, create pgp key in admin/:
-
- set pgpReadOnly := false
- pgp-cmd gen-key // use $passPhrase
- pgp-cmd send-key <keyIdUsingTabCompletion> hkp://keyserver.ubuntu.com
-
-2. create sensitive.sbt with contents:
-
-pgpPassphrase := Some($passPhrase.toArray)
-
-pgpPublicRing := file("admin/pubring.asc")
-
-pgpSecretRing := file("admin/secring.asc")
-
-credentials   += Credentials("Sonatype Nexus Repository Manager", "oss.sonatype.org", $sonaUser, $sonaPass)
-*/
diff --git a/admin/pubring.asc b/admin/pubring.asc
deleted file mode 100644
index 61de5ecf0..000000000
--- a/admin/pubring.asc
+++ /dev/null
@@ -1,18 +0,0 @@
------BEGIN PGP PUBLIC KEY BLOCK-----
-Version: BCPG v1.49
-
-mQENBFR/wRIBCACgRrOC5zAzSuuhf35NVzAG3K6xADFcxSKtxyIKydvlzhgdTuH8
-MvqLaQvo0gOQ/32DEnBy0DbDu8WEDvpZzEM21eTz/VW9VDb0fbNEXoLODY+IYt+v
-ohsw0NzQV6qSk2WQVYWVuZbfZXZBT3/JoDxHKRRl/IvZb8CQkRypxKVmsud/IOsu
-t/hHRWzbgPtNJNUX0Uhrz96P0+LcKfwUt34TMBIyfSY9C3ZPzPYTlhuDqtJunKTj
-NZljt9cbAMjJsuw0rSYNkAb5kGblguUn7BLp5Ngox6h7/MP7v1YM7WsXa3oMcHyX
-0Rf3PPE8HELcfsbF+FAN3jCNWgaz15bCz3lhABEBAAG0LHNjYWxhLXhtbCA8c2Nh
-bGEtaW50ZXJuYWxzQGdvb2dsZWdyb3Vwcy5jb20+iQEcBBMBAgAGBQJUf8ESAAoJ
-EIbbEE4RFVfeHWgH/1B5U+UT/lx8Z/V3qK3EfsVVM5nbcJqy+jRC9mNsO4VSX7+G
-rNuIn6oZ08SZKcmzWo71i9uqatgaFtVHhLbOJ9a72Ja8YoBSKerv6gpcFcAH4fDB
-m5FyoxbM0K9vLwUvkbewNLLK8XbWwuCuHTmtEW2WPv2d/PmyOXuXoos/E1HiPTkU
-iN5TIuJYpDvy7cxQL0qlaEcpWjzXHyy6+BFA1C8zlwoX+2iAx1rVGd3mPDHNgY+U
-Z3MYArHxu5QC3BZs2wsD9/SkioanFhzH4g/MB1qaQlD2WGqXwoDK2/Bsnu5pJaPA
-QhCuqobGMQ8Umupnejt8fIIQ/8A99sneBU+eEB8=
-=450t
------END PGP PUBLIC KEY BLOCK-----
diff --git a/admin/secring.asc.enc b/admin/secring.asc.enc
deleted file mode 100644
index 25ed5cc2d..000000000
--- a/admin/secring.asc.enc
+++ /dev/null
@@ -1,40 +0,0 @@
-U2FsdGVkX1/9hpS9pNHRzznj4yQKe9noi3duTRAp0JhO2nHrJwtDWdRcEBZXeWto
-7wbM7Ji+R4gqdNd3bb2UO8+NTcOtBE0/toioD/MV2fTTffzVVYwBvmknfknIcOdZ
-9pyfMvpwcdrZ+KSSGkg0xowac2bjVaO7i54DECxA2mMs5sqev/SiatnmsD6i5I5h
-Wif7bdaTqBOHIxJ70776iUc0Z+2auOc73by1MUPhR2ceh93KmavM6rkHk2JrzNj/
-wCwbgXLoC1NjQfgWM1tWIa1v7l1ZsvrU0ozz7ls3IR79EKGYvB0us+Qz0YUiv+Sn
-f237bzy/7PRB5bQTIHe9VWOMNGKgML4vw4VAZ59EMkiBDOCzWRCpfa4xdZJvYkrw
-K95/Lx4GhHI/i6/E6TGgzaJSwY5+24gmffLQBM4vyGTwJUOMjDkWaQLvhjbvTuYX
-y7xX0/mbhLAQ5qPyOESfC2gx6ZSvaXNctGNuEa+BcV74+17XxLrA/BVd9qiVEZhs
-peRFScKhz/mfVS6CBJ11arUtB0348em5ACIy/OEnXCSRP56TA0m1+OnZV9zUNJLX
-7W9AenWvxTrsgH1SyyUz0vpP9ujfHusWRpMPNy7Ovlp4WP1ntAYnqmPVUZUGBEIy
-0nWyTPAXNaPm4TsOCFWl3Ho0DYSyejJ2/nTTmpBXnDxIirba+MMPcu03tJydmBSC
-TID4qSR7DCJoYbosj1/88WxQmyC8JwFNnXPAN+VoPd4LtnC+K8urtMEg5wSY7p9G
-mQmqLKU2BhTkTn+d5l+7gzL1ILXWSuKEWUj5v813teZ784bMoYLM/q1vsHsjb2vk
-tFIxos6tk/xIfFkeFB59gLqavrPZJWTNNW3QIAQPdkYu7GB8y/3de6ujYKiaRlqH
-yuC87T5INBWSj+RBpyBLU50gMIIlEnJ56UYN2Lheaom/96ciqydalKJalQzhzpvR
-dy5JYXiWn4v5b1Rkyiv0XGVG0OaB//qgsicRBLOFfPQNQ/WaFHaa/QDMpMJrutAw
-QMztk5DlEbCOAzRYKjU7v3kCA3VVgXsgUr0dKy+bIUwFJ7jj9GN6PgHQiLIv9bNE
-s4vEDp/2XJ7dWwBZo5bnUmgdA8NSuu5JNGD0Xm7de3+1ZBd75N4XrLgTAk4Y4k/O
-VYDPeVyAUM2vfbu1sSXcT5hnTDjCuo9gZwPqCnwrDBqe3HjKRgQkf6ErlmcSOAXJ
-CU2mjwfbzLvx796o/XCClCAqZPBZJ0KgtWv7TCB4K96G3KBt4h6BmgjhFJIyOIjp
-MCBPHI1Nx+Kj+Pf81ItAh08OE1tJT53dGK37dSCCEkjoAAmKQFARvH8RKxGvq/j6
-o7YoQnzIb/fPGrLx8fzYL3t4YeuEdfTiudt1HHneffidQ6PTHlILeEzQ0c+51TJV
-D9AT8raAvJjZlwNIyXr4MwVSiIHKW0IIkTrR4IIYshhj9DOfa6MzhrJWfiWRZjXc
-4oKMv2mPzzfORi/Ct8JWfU2OKYy5jNsnZM5B/jo+z6MaXx8qZi5r+Lod2F1cQCnp
-GoXIni5Ad2E2uhqycCgQ7kb69z7QeuJzpAkQwcHBFBDfNrHW+HfqzD2qQH8hapKI
-k2y80EUnCwYjeP7NIY03+iJt02YUR52bVk8WX0AIoZoISwKfG9RA3F7Dsn7SgX3U
-aADuVVgE8REAUgJMX9+Y/u5/s3RIjXCwyAf0U9wpT/FhWMEegrwXt86kgxoW4TBf
-+2yJSFfgiaTxN4Hx7Xt3/4usyx+hr9K3I1Y0q1M6NGvHfP4w9nb66h/bv1AhgM1J
-Tws+TDLS0POG4ZqbzMz6B3cr2NF45tD4zt8ZCoEnyjJKPfMqzsmSauvBHcsQTL7E
-GB7Bw9e+UkGBSHCe2ByvYDoBnppS/8Ct4eWEq8FfMQbnrUv+FfIDzhvgsN2LS/iY
-VW3mFcsOJKNT81Y2GIUlitU8P8ugF4GjCGHEb1ZHIjxiIb4V+8q5F6KoKMmpguAK
-qYSQvlz/uqwRhYrziygIZHPFAhEFaQraRg9fXyH1nWQ2pPqbVnlwFU/7J7FebnpF
-huE2rWuEdsNzPWuK/weTjYwEHs/jppirtfQtDtHts9tS8oAIGImVZRXrxvivRdpN
-TTrHrgRUaoRnR56OYfTF1eSsjc7CH6nIEtGXIa7RC5WT4cAEH9WwIlis9zXEp///
-xduZMomtAdlhhqwHkpwW0UWETvK6HzyrW2VlDEYvP21WaIsZBnrmeqKFW/pNub9l
-33f36uc3/t5vYP5QBsdZiTf2OGK3VZKzxjQL/whxlt9qAxOoHttyb4ZqtxNV/TNv
-/EzmlwGSM3iSLuZD0Eckzyw5/3rqDSLqfqZlJDgIBCjCTPInVyMA70MVyryYdbe7
-ADDPRnRkvcny2ncQzlkYCgGJdOABmaaE4ILwh/BknxEC7RBU/4NhflEehSwAjh10
-NensOrg5RBBScZDTKhKZkPM4ixPXCk6enSmXFQKyH2r+lq8vMae1DOM6AeGMrnfE
-u+aaGqFA/nDJrK3xwOOyEA==

From d2900a440e3534ff3544e76149fa1fd3e1cf8331 Mon Sep 17 00:00:00 2001
From: Lukas Rytz <lukas.rytz@gmail.com>
Date: Mon, 11 May 2015 14:34:14 +0200
Subject: [PATCH 2/3] cross-build with 2.11 and 2.12

---
 .travis.yml | 2 +-
 build.sbt   | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.travis.yml b/.travis.yml
index f35a75d08..205f2b594 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,6 +1,6 @@
 language: scala
 
-script: sbt clean update test publishLocal
+script: sbt clean update +test +publishLocal
 jdk:
   - openjdk6
   - openjdk7
diff --git a/build.sbt b/build.sbt
index b97e13faf..f38d0da04 100644
--- a/build.sbt
+++ b/build.sbt
@@ -6,7 +6,9 @@ name                       := "scala-xml"
 
 version                    := "1.0.5-SNAPSHOT"
 
-scalaVersion               := "2.11.4"
+scalaVersion               := crossScalaVersions.value.head
+
+crossScalaVersions         := Seq("2.11.6", "2.12.0-M1")
 
 // important!! must come here (why?)
 scalaModuleOsgiSettings

From 070afefeadcebdf5fc909d3491a1091e6bae4b54 Mon Sep 17 00:00:00 2001
From: Lukas Rytz <lukas.rytz@gmail.com>
Date: Mon, 11 May 2015 14:46:53 +0200
Subject: [PATCH 3/3] Tag-driven publishing, v2

Scripts taken from here:
https://github.com/scala/scala-java8-compat/commit/4a6cfc97cd95227b86650410e1b632e5ff79335b

New keys generated as described in the README.
---
 .travis.yml                |  14 ++++++++-
 admin/README.md            |  61 +++++++++++++++++++++++++++++++++++++
 admin/build.sh             |  25 +++++++++++++++
 admin/encryptEnvVars.sh    |  11 +++++++
 admin/genKeyPair.sh        |  41 +++++++++++++++++++++++++
 admin/gpg.sbt              |   2 ++
 admin/publish-settings.sbt |   9 ++++++
 admin/pubring.asc          |  18 +++++++++++
 admin/secring.asc.enc      | Bin 0 -> 1872 bytes
 9 files changed, 180 insertions(+), 1 deletion(-)
 create mode 100644 admin/README.md
 create mode 100755 admin/build.sh
 create mode 100755 admin/encryptEnvVars.sh
 create mode 100755 admin/genKeyPair.sh
 create mode 100644 admin/gpg.sbt
 create mode 100644 admin/publish-settings.sbt
 create mode 100644 admin/pubring.asc
 create mode 100644 admin/secring.asc.enc

diff --git a/.travis.yml b/.travis.yml
index 205f2b594..9a80fe916 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,8 +1,20 @@
 language: scala
 
-script: sbt clean update +test +publishLocal
+env:
+  global:
+    - PUBLISH_JDK=openjdk6
+    # PGP_PASSPHRASE
+    - secure: "BYC1kEnHjNrINrHYWPGEuTTJ2V340/0ByzqeihLecjoZ75yrjWdsh6MI1JEUWgv5kb+58vLzib21JfnjsPK6Yb2bSXuCFCsEtJNh6RJKgxkWlCOzfTSh5I2wl7PCjRClRL6gseX2uTSvFjL4Z//pmxwxeXlLp7voQe4QAUq1+sE="
+    # SONA_USER
+    - secure: "OpBwPc1GNvauageYOH3RscAa7wpZxgpmqDz15aigIKLNWzAhAtVUx0MleZ8rQeoqml6nrAvlnzuVHjKL2lVcjMPpjUis7bcQ5UAGK7tZK8x+qZNQxXmpXu8+pENwQA2yFaqt/xy7K5jFOrHJHTRxcPnyVG1yKakPWz53PPYUwbc="
+    # SONA_PASS
+    - secure: "Xw7rI/qlML1nD2e2XwlakkhKAWNGZKqqE+Q3ntTvFpfHryl7KLCvVzJ4LIavnL6kGJaWOgy9vlSoEWn5g9nqHSfE31C/k5pY5nTMAKiwiJzfAS+r0asKXW2gmKhwtcTBkqyLVOZLCJSPVlFRQyfBJHY+Fs0L3KWcnMQgtBlyDhU="
+
+script: admin/build.sh
+
 jdk:
   - openjdk6
   - openjdk7
+
 notifications:
   email: adriaan.moors@typesafe.com
diff --git a/admin/README.md b/admin/README.md
new file mode 100644
index 000000000..55ae9c8ae
--- /dev/null
+++ b/admin/README.md
@@ -0,0 +1,61 @@
+## Tag Driven Releasing
+
+Copied from https://github.com/scala/scala-java8-compat/commit/4a6cfc97cd95227b86650410e1b632e5ff79335b.
+
+### Background Reading
+
+  - http://docs.travis-ci.com/user/environment-variables/
+  - http://docs.travis-ci.com/user/encryption-keys/
+  - http://docs.travis-ci.com/user/encrypting-files/
+
+### Initial setup for the repository
+
+To configure tag driven releases from Travis CI.
+
+  1. Generate a key pair for this repository with `./admin/genKeyPair.sh`.
+     Edit `.travis.yml` and `admin/build.sh` as prompted.
+  2. Publish the public key to https://pgp.mit.edu
+  3. Store other secrets as encrypted environment variables with `admin/encryptEnvVars.sh`.
+     Edit `.travis.yml` as prompted.
+  4. Edit `.travis.yml` to use `./admin/build.sh` as the build script,
+     and edit that script to use the tasks required for this project.
+  5. Edit `.travis.yml` to select which JDK will be used for publishing.
+
+It is important to add comments in .travis.yml to identify the name
+of each environment variable encoded in a `:secure` section.
+
+After all of these steps, your .travis.yml should contain config of the
+form:
+
+	language: scala
+	env:
+	  global:
+	    - PUBLISH_JDK=openjdk6
+	    # PGP_PASSPHRASE
+	    - secure: "XXXXXX"
+	    # SONA_USER
+	    - secure: "XXXXXX"
+	    # SONA_PASS
+	    - secure: "XXXXXX"
+	script: admin/build.sh
+
+If Sonatype credentials change in the future, step 3 can be repeated
+without generating a new key.
+
+Be sure to use SBT 0.13.7 or higher to avoid [#1430](https://github.com/sbt/sbt/issues/1430)!
+
+### Testing
+
+  1. Follow the release process below to create a dummy release (e.g. 0.1.0-TEST1).
+     Confirm that the release was staged to Sonatype but do not release it to Maven
+     central. Instead, drop the staging repository.
+
+### Performing a release
+
+  1. Create a GitHub "Release" (with a corresponding tag) via the GitHub
+     web interface.
+  2. Travis CI will schedule a build for this release. Review the build logs.
+  3. Log into https://oss.sonatype.org/ and identify the staging repository.
+  4. Sanity check its contents
+  5. Release staging repository to Maven and send out release announcement.
+
diff --git a/admin/build.sh b/admin/build.sh
new file mode 100755
index 000000000..34f5ccda1
--- /dev/null
+++ b/admin/build.sh
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+set -e
+
+# prep environment for publish to sonatype staging if the HEAD commit is tagged
+
+# git on travis does not fetch tags, but we have TRAVIS_TAG
+# headTag=$(git describe --exact-match ||:)
+
+if [ "$TRAVIS_JDK_VERSION" == "$PUBLISH_JDK" ] && [[ "$TRAVIS_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[A-Za-z0-9-]+)? ]]; then
+  echo "Going to release from tag $TRAVIS_TAG!"
+  myVer=$(echo $TRAVIS_TAG | sed -e s/^v//)
+  publishVersion='set every version := "'$myVer'"'
+  extraTarget="+publish-signed"
+  cat admin/gpg.sbt >> project/plugins.sbt
+  cp admin/publish-settings.sbt .
+
+  # Copied from the output of genKeyPair.sh
+  K=$encrypted_6b8d67feaab7_key
+  IV=$encrypted_6b8d67feaab7_iv
+
+  openssl aes-256-cbc -K $K -iv $IV -in admin/secring.asc.enc -out admin/secring.asc -d
+fi
+
+sbt "$publishVersion" clean update +test +publishLocal $extraTarget
diff --git a/admin/encryptEnvVars.sh b/admin/encryptEnvVars.sh
new file mode 100755
index 000000000..b62566798
--- /dev/null
+++ b/admin/encryptEnvVars.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+#
+# Encrypt sonatype credentials so that they can be
+# decrypted in trusted builds on Travis CI.
+#
+set -e
+
+read -s -p 'SONA_USER: ' SONA_USER
+travis encrypt SONA_USER="$SONA_USER"
+read -s -p 'SONA_PASS: ' SONA_PASS
+travis encrypt SONA_PASS="$SONA_PASS"
diff --git a/admin/genKeyPair.sh b/admin/genKeyPair.sh
new file mode 100755
index 000000000..17db3f39b
--- /dev/null
+++ b/admin/genKeyPair.sh
@@ -0,0 +1,41 @@
+#!/bin/bash
+#
+# Generates a key pair for this repository to sign artifacts.
+# Encrypt the private key and its passphrase in trusted builds
+# on Travis CI.
+#
+set -e
+
+# Based on https://gist.github.com/kzap/5819745:
+function promptDelete() {
+    if [[ -f "$1" ]]; then
+        echo About to delete $1, Enter for okay / CTRL-C to cancel
+        read
+        rm "$1"
+    fi
+}
+for f in admin/secring.asc.enc admin/secring.asc admin/pubring.asc; do promptDelete "$f"; done
+
+echo Generating key pair. Please enter 1. repo name 2. scala-internals@googlegroups.com, 3. a new passphrase
+echo Be careful when using special characters in the passphrase, see http://docs.travis-ci.com/user/encryption-keys/#Note-on-escaping-certain-symbols
+cp admin/gpg.sbt project
+sbt 'set pgpReadOnly := false' \
+    'set pgpPublicRing := file("admin/pubring.asc")' \
+    'set pgpSecretRing := file("admin/secring.asc")' \
+    'pgp-cmd gen-key'
+rm project/gpg.sbt
+
+echo ============================================================================================
+echo Encrypting admin/secring.asc. Update K and IV variables in admin/build.sh accordingly.
+echo ============================================================================================
+travis encrypt-file admin/secring.asc
+rm admin/secring.asc
+mv secring.asc.enc admin
+
+echo ============================================================================================
+echo Encrypting environment variables. Add each to a line in .travis.yml. Include a comment
+echo with the name of the corresponding variable
+echo ============================================================================================
+read -s -p 'PGP_PASSPHRASE: ' PGP_PASSPHRASE
+travis encrypt PGP_PASSPHRASE="$PGP_PASSPHRASE"
+
diff --git a/admin/gpg.sbt b/admin/gpg.sbt
new file mode 100644
index 000000000..68ae46411
--- /dev/null
+++ b/admin/gpg.sbt
@@ -0,0 +1,2 @@
+
+addSbtPlugin("com.typesafe.sbt" % "sbt-pgp" % "0.8.3") // only added when publishing, see build.sh
diff --git a/admin/publish-settings.sbt b/admin/publish-settings.sbt
new file mode 100644
index 000000000..f763ea06c
--- /dev/null
+++ b/admin/publish-settings.sbt
@@ -0,0 +1,9 @@
+def env(key: String) = Option(System.getenv(key)).getOrElse("")
+
+pgpPassphrase := Some(env("PGP_PASSPHRASE").toArray)
+
+pgpPublicRing := file("admin/pubring.asc")
+
+pgpSecretRing := file("admin/secring.asc")
+
+credentials   += Credentials("Sonatype Nexus Repository Manager", "oss.sonatype.org", env("SONA_USER"), env("SONA_PASS"))
diff --git a/admin/pubring.asc b/admin/pubring.asc
new file mode 100644
index 000000000..df4501ad6
--- /dev/null
+++ b/admin/pubring.asc
@@ -0,0 +1,18 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: BCPG v1.49
+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+=/6/b
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/admin/secring.asc.enc b/admin/secring.asc.enc
new file mode 100644
index 0000000000000000000000000000000000000000..626ff5d10725214624e7c797a9eb74864127bd10
GIT binary patch
literal 1872
zcmV-W2e0@fqpgw+LsRd7u2o)%di3Y_9iX0wgGZTvHLMnHOVRsifjxLtWxXi~jtiA-
z#bq1(7NwM*VTQi!XlB8CsKd6Vb?RVs+LcSU9mzPJDW))Y09x4*M_jRHK)t!Hd4Q#^
zO`Scgult5G8x2H&A-0j`lh54Vrp6$rFgVxY6$uvk(})PKqp0haRYw=fux{<WK6_+g
zq4+-G;JJ1}sxA}AIVOWPe^?4UKjV!NK{=0_J(7=))^1T8n%fmF-m;JircdAc)w;Tc
zz#!6_^ZZx}lx!1H`Y8@{!8h1q0Bu}jj;ni5gk9=9;a2um>Ig7Qu6A-9wVubfVV=|G
z{{Z;GKKc2I{ka&)nadAV;*EN7&jC)0u}wYPd-5ljH#csr$>A#+8jUmzjBLne>Avff
z3?1)>MJ>&-io7mY8FL`pIy-Tn{kTvT#`k}16tuGOF17oD2ZHATYgY;uhAK@rXf}kl
zp607sR*Jd2LOK)9pPiB$@4#{4Og(yRHtXuAgTfzmJfJ>*A*eiD8lDSvP8#G$4s3iU
zEJ0eveZ&S;+l1zzAc|x=O;DYO_d%VY>1R#%xUm11l13?Pr)58ok6V{A3B{AcPLeOz
zHN1P;pm_lsgMQ@gBZ?|Nj&C5`;<pV&jBB(kvY8q?<QSIW<Qa~8D0PupZGE){mj;ME
zSrMSgtd4^OD;%>se!}aM{k)@St|b6>!b>j_Gap>MY?wgi>JVOeq>3y7QnnjZl0{hi
zXWt-ZUv$bfpY_hP(%^1SH&F@i{xP{l@P$l5w5ahNHyHWmdMPdNoOEQ-D6Ot~G%!jH
z8C=WK?{W(e-#}y}pQxUqRjM6MGWqRnZ2U$a%q|N-F#aCrUA)O#e=F22p06Mx=91=!
zp0<ePrB`{DV?p~z;!PY-qH;3Ad!_jLn6CGs@`B6To8JJGz{S7&4s{BLCQ{vpA>ee_
zinPL)?)@Q>7zfvkXg<x8P=SV2XO`&fqL&DsIPd(;(SD~UI~B?a(l}%0pT_(kFrud<
zz6rFc2VrXRRJ_;AVi9a*8;GhPQ($Jwpa#i?gdFoEn`Zd#pwO)YIeB2N0kBOd3M0Kt
z?I;ZDtt+~iThD7{zLt6>+(zjt39zCpg3QfsKSX_EYNI!k`N%2xL~a2oBK(_|TU4E>
z-?=Wv{0)yf&29)J#J>mMwR$UB%fxSFDsgPQrN8H@+G7z3$ESL+$b{3%4*?8Sm6E)y
zikukNt?wZvD^SgpDH7IMkb|92-dG<ZKf?q~d&Jo$ROySjeERWtfCV&fZq~DW`W0Uh
zGnEX^It~Ca3q=Jgw_d@k!FD!0nzKe^e08A!_tS`>Z`k3j7$;76!SM{(W!CWcno+}w
z2oehz#zkCAYaip?YJds7E}L5Y2C@b~5fW76^s`B>=D4pZ$2-435i0wq0NNeBNvctx
zmDF@(NO0g8drhqd5;C4vd5666m(VH0j-$jy<HSwitQBIHn%QV8LjlNv9>ZaptkAYq
zZUMD=c9d<CGq^5fOSj%mNo`h)?icO0f<xR4Qe(W(5?JYTMaViJXYEHymdIufQJ@Kk
zFB4b(_KgXm8gP|F2_AqSWH$GekD><V$U&+OmO0;krwLq;0R$*eiT0BWNr7DhDaUV+
zpg?VHKb-f&*%x`|wJb`QwbOWGiZewW*CaMXa6dqWLPY5|ghg>eNngez7wj9wG2}4S
zY~0z1gifa^iboBmjK8RC0+btk0<64If91L05m61O{WXtiQfE|0n?YUqCHI!b=~S?m
zoA_vx?*x<Hk5S$=Z<1i8O=@PpC6CPH{^bue2N677=!w=e=#7=5^@W;`+lP5ea_S=5
z<+zO;ph5FHN#KdJpl{y;$nRmyqKOwsq<CCxl9aSz)>Liq$<J`L$HFpsO$ndVKX~ao
z>|1`5QNMP6Ex^a&Ys#<Vxo=5P`FPLO#)|B~l8cOBXh<{j&WL;tffQ{x#|*Pt1?xQn
zi1oNsYa>DiTk>Ch5T@$ekg90Q{+n$?8(el+Ez#ZKV??yD^UK>7g^QMT!iq_w8~%Ft
z;e=?o3MaHmjV%^%U8ghL_1v%U4YBdm^hZF}5P-W=XC%;{FCh+tl#$+Kmx?H{USO`4
z3~G!xl?T?kK$Mp8t;mj7)FJgZw`IHv*~N!`3QR`FG-?t^pb>w8+^j9Jk2VKk3k2`x
z^Z>-mIhY*18?LHpvCkIox<Zif*ULV@;;q%b=PC=1i;MK_7p=WO4lib+j(1sNi<=nv
za|$k`ofo6qgN0B?KXHbgisDDVg<wfglt@4}G>fJI>8{3KWu_U~3J;jq_{)~myM;Oh
zrVpt^YOu3jtsmU`FY>-1AkO4qi4B>Rlp-9&NiC_Cma+CWnu~X?FgLGa(n>9Hnwd)M
z7o9CM_iWSfdrm%(X%^6z&p8t$RhU-8a^v0HVA0ZJ@3VcmJy@UZvr4b*@)4%7(C*e#
KL)moSr4dnNG@(HN

literal 0
HcmV?d00001