This is an automated email from the ASF dual-hosted git repository. hboutemy pushed a commit to branch MPOM-205 in repository https://gitbox.apache.org/repos/asf/maven-apache-parent.git
commit 84431d30b666d2f9a9f2db51f13d5fa9ded01323 Author: Hervé Boutemy <[email protected]> AuthorDate: Mon Aug 6 22:50:46 2018 +0200 [MPOM-205] SHA-512 checksum in target/ for source release --- pom.xml | 30 ++++++++++++++++++++++++++++++ src/site-docs/apt/index.apt.vm | 5 +++++ 2 files changed, 35 insertions(+) diff --git a/pom.xml b/pom.xml index 5878b36..246c1d7 100644 --- a/pom.xml +++ b/pom.xml @@ -422,6 +422,36 @@ under the License. </execution> </executions> </plugin> + <!-- calculate checksums of source release for Apache dist area --> + <plugin> + <groupId>net.nicoulaj.maven.plugins</groupId> + <artifactId>checksum-maven-plugin</artifactId> + <version>1.6</version> + <executions> + <execution> + <id>source-release-checksum</id> + <goals> + <goal>files</goal> + </goals> + </execution> + </executions> + <configuration> + <algorithms> + <algorithm>SHA-512</algorithm> + </algorithms> + <csvSummary>false</csvSummary> + <fileSets> + <fileSet> + <directory>${project.build.directory}</directory> + <includes> + <include>${project.artifactId}-${project.version}-source-release.zip</include> + <include>${project.artifactId}-${project.version}-source-release.tar*</include> + </includes> + </fileSet> + </fileSets> + <failOnError>false</failOnError><!-- usually, no file to do checksum: don't consider error --> + </configuration> + </plugin> </plugins> </build> </profile> diff --git a/src/site-docs/apt/index.apt.vm b/src/site-docs/apt/index.apt.vm index a5e8fbc..ebf502d 100644 --- a/src/site-docs/apt/index.apt.vm +++ b/src/site-docs/apt/index.apt.vm @@ -108,6 +108,9 @@ The <<<apache-release>>> Profile * maven-gpg-plugin: configured to sign everything. It expects to find a passphrase in <<<$\{gpg.passphrase\}>>>, presumably in your <<<settings.xml>>>. + * checksum-maven-plugin: configured to create a checksum file(s) for source release as + required by {{{http://www.apache.org/dev/release-distribution#sigs-and-sums}Apache release distribution policy}}. + [] When doing a release with maven-release-plugin, this will create files in <<<target/checkout/target>>> ready @@ -116,6 +119,8 @@ The <<<apache-release>>> Profile * <<<$\{artifactId\}-$\{version\}-source-release.[zip|tar.gz]>>>: the source release archive(s) + * <<<$\{artifactId\}-$\{version\}-source-release.[zip|tar.gz].sha512>>>: their checksum(s) + * <<<$\{artifactId\}-$\{version\}-source-release.[zip|tar.gz].asc>>>: their signature(s) Settings Configuration
