I banged my head on this problem for two days. I’m fairly certain the root cause was my skipping the step to publish my gpg key e.g
gpg --keyserver keyserver.ubuntu.com --send-keys XXXXXXX
where XXXXXX is the key I signed my artifacts with.
I also change my github action to post archives to central instead of s01:
curl --request POST \
--verbose \
--header "Authorization: Bearer $SONATYPE_TOKEN" \
--form bundle=@./api/build/zips/api.zip \
https://central.sonatype.com/api/v1/publisher/upload
the token is a base64 encoded username:password provided by the user token.
printf username:password | base64
This is publishing without dealing with publish gradle plugins…