Update maven-gpg-plugin in publishing

[Alan Zimmer (alzimmermsft)]

Description

Please add an informative description that covers that changes made by the pull request and link all relevant issues.

If an SDK is being regenerated based on a new swagger spec, a link to the pull request containing these swagger spec changes has been included above.

All SDK Contribution checklist:

• The pull request does not introduce [breaking changes]
• CHANGELOG is updated for new features, bug fixes or other significant changes.
• I have read the contribution guidelines.

General Guidelines and Best Practices

• Title of the pull request is clear and informative.
• There are a small number of commits, each of which have an informative message. This means that previously merged commits do not appear in the history of the PR. For more information on cleaning up the commits in your PR, see this page.

Testing Guidelines

• Pull request includes test coverage for the included changes.

[azure-pipelines]

Azure Pipelines:
Successfully started running 2 pipeline(s).
33 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[azure-pipelines]

Azure Pipelines:
Successfully started running 2 pipeline(s).
33 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

This PR updates the Maven publishing/signing infrastructure used by the engineering pipelines, primarily by bumping the maven-gpg-plugin version used for sign-and-deploy-file in release scripts and tweaking checkout/script behavior in release pipeline templates.

Changes:

• Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 in Maven signing/publishing scripts.
• PowerShell script cleanups (avoid % alias; adjust null-check style) and add Maven debug flags for the local-GPG path.
• Update release archetype templates to set fetchTags: false during checkout: self with shallow clones.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
eng/scripts/SignAndHash-MavenPackages.ps1	Updates hardcoded maven-gpg-plugin version used during signing/hashing.
eng/scripts/Publish-MavenPackages.ps1	Updates maven-gpg-plugin version and adjusts PowerShell/Maven invocation behavior.
eng/pipelines/templates/stages/archetype-java-release-pom-only.yml	Disables tag fetching on shallow checkout: self for the signing stage.
eng/pipelines/templates/stages/archetype-java-release-patch.yml	Disables tag fetching on shallow checkout: self for the signing stage.
eng/pipelines/templates/stages/archetype-java-release-batch.yml	Disables tag fetching on shallow checkout: self for the signing stage.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.