osdir.com


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: New release distribution checksum policy


On 24 August 2018 at 18:51, Thomas Vandahl <tv@xxxxxxxxxx> wrote:
> On 24.08.18 15:42, sebb wrote:
>> If it really is the case that the Apache Parent POM only creates the
>> checksums for artifacts with a specific name, then IMO it is badly
>> broken and needs a bug report.
>
> Feel free. Lines 425 to 454.
>
>> Note that it says:
>> "For every artifact distributed to the public through Apache channels,
>> the PMC..."
>>
>> Since we distribute the binaries, they must have SHA256+
>
> I see. Does Maven Central qualify as "Apache channel"? Because I have no
> idea how to achieve this. Tried multiple configurations - PITA.

I don't know if Maven Central counts; I expect it needs changes to Nexus.

However www.apache.org/dist does count, and that's the one that Maven
needs to fix.

> Bye, Thomas
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
> For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx