Hi Gary,
On 10.12.2024 13:26, Gary Gregory wrote:
Using:
mvn verify -Prelease artifact:compare
-Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309
(Should' we also say "clean"?)
I don't believe `clean` is necessary. I ran `mvnw verify
artifact:compare` twice and there are no differences in the generated
artifacts.
[ERROR] sha512 mismatch log4j-bom-2.24.3-cyclonedx.xml: investigate
with diffoscope
target/reference/org.apache.logging.log4j/log4j-bom-2.24.3-cyclonedx.xml
target/bom.xml
Any ideas?
Can you compare the two files above?
Piotr
