+1 (non binding) checked signatures and hash of staged artifacts I have used the staged binary artifacts to build a bunch of projects on Linux (Fedora 26), all ok
We could also consider not to deliver md5 hash anymore ( https://www.apache.org/dev/release-signing.html) Enrico Il giorno dom 17 giu 2018 alle ore 23:10 Stephen Connolly < stephen.alan.conno...@gmail.com> ha scritto: > Dang! forgot to paste the link > https://github.com/apache/maven-site/pull/19 > > On Sun, 17 Jun 2018 at 22:09, Stephen Connolly < > stephen.alan.conno...@gmail.com> wrote: > > > Draft site changes > > > > On Sun, 17 Jun 2018 at 21:45, Stephen Connolly < > > stephen.alan.conno...@gmail.com> wrote: > > > >> > >> > >> On Sun, 17 Jun 2018 at 21:44, Stephen Connolly < > >> stephen.alan.conno...@gmail.com> wrote: > >> > >>> Hi, > >>> > >>> We solved 16 issues: > >>> > >>> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12342826&styleName=Text&projectId=12316922 > >>> > >>> There are 356 issues left in JIRA for Maven core: > >>> > >>> > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20due%20ASC%2C%20priority%20DESC%2C%20created%20ASC > >>> > >>> Staging repo: > >>> https://repository.apache.org/content/repositories/maven-1438/ > >>> > >>> The distributable binaries and sources can be found here: > >>> > >>> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/ > >>> > >>> Specifically the zip, tarball and source archives can be found here: > >>> > >>> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-bin.zip > >>> > >>> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-bin.tar.gz > >>> > >>> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-src.zip > >>> > >>> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-src.tar.gz > >>> > >>> The release artifacts are staged for distribution in: > >>> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.5.4 > >>> > >>> Source release checksum(s): > >>> apache-maven-3.5.4-src.tar.gz sha1: > >>> 04aefb9462af8cf7ca93808cd246f4c28b8ae4a1 sha256: > >>> f3ba1f1b24bbd4c345174ac616d40e26e72dad6022d56317d3ff6f7dd003e2f5 > >>> apache-maven-3.5.4-src.zip: sha1: > >>> 1ee9850a046860d71267a043a29e0aa9acc13bcd sha256: > >>> ddcddecc8048d24edd3fa98fe50ae7f6a753389367d24593bf39e37427f643f5 > >>> > >>> Git tag: > >>> > >>> > https://gitbox.apache.org/repos/asf?p=maven.git;a=commit;h=1edded0938998edf8bf061f1ceb3cfdeccf443fe > >>> > >>> Staging site: > >>> https://maven.apache.org/components/ref/3-LATEST/ > >>> > >>> Vote open for 72 hours. > >>> > >>> [ ] +1 > >>> [ ] +0 > >>> [ ] -1 > >>> > >>> Thanks, > >>> > >>> Stephen. > >>> > >> > >> $ sra https://repository.apache.org/content/repositories/maven-1438 > 3.5.4 > >> Analyzer... > >> > >> stagingUrl: > https://repository.apache.org/content/repositories/maven-1438 > >> groupId: org.apache.maven > >> artifactId: apache-maven > >> version: 3.5.4 > >> > >> Source ZIP url exists. > >> > >> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-src.zip > >> > >> Source ZIP SHA1 url exists. > >> > >> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-src.zip.sha1 > >> > >> Binary ZIP url exists. > >> > >> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-bin.zip > >> > >> Binary ZIP SHA1 url exists. > >> > >> > https://repository.apache.org/content/repositories/maven-1438/org/apache/maven/apache-maven/3.5.4/apache-maven-3.5.4-bin.zip.sha1 > >> > >> Calculated SHA1 of source ZIP matches published SHA1 of source ZIP. > >> 1ee9850a046860d71267a043a29e0aa9acc13bcd > >> > >> Calculated SHA1 of binary ZIP matches published SHA1 of binary ZIP. > >> 8a0d9cc9d4da3fac195de8e1e99fe07158d54192 > >> > >> Git revision of release as determined from > >> > maven-core-3.5.4.jar:org/apache/maven/messages/build.properties(buildNumber): > >> 1edded0938998edf8bf061f1ceb3cfdeccf443fe > >> > >> Files that are present in the source distribution but not in the source > >> revision: > >> DEPENDENCIES > >> > >> > > >
