From 7501c870cc951acc92381c5c832c03b87ae56b0b Mon Sep 17 00:00:00 2001
From: Jeff Davidson <jpd@google.com>
Date: Wed, 19 Aug 2026 10:37:38 -0700
Subject: [PATCH] GPG sign tagged release builds before publishing to Maven.

---
 publish.gradle | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/publish.gradle b/publish.gradle
index 7b6eb7d6..7e78418b 100644
--- a/publish.gradle
+++ b/publish.gradle
@@ -6,6 +6,10 @@ afterEvaluate {
 
         publishToMavenCentral()
 
+        if (!project.version.toString().endsWith("-SNAPSHOT")) {
+            signAllPublications()
+        }
+
         pom {
             name = project.pomName
             description = project.pomDescription