Wait, you mean --strict-checksums option or "provided/trusted checksums" feature? Latter cannot be active by default, as it requires user input.
T On Fri, 8 May 2026 at 03:41, Manfred Moser <[email protected]> wrote: > > oh .. I thought with Maven 4 it will be active by default. > > Manfred > > On 2026-05-07 16:58, Tamás Cservenák wrote: > > Howdy, > > > > checksum verification is the same in Maven 3 and Maven 4 (not active by > > def). > > > > Or I may miss your question, what do you mean by "changed default to > > activate the checksum verification"? > > > > Thanks > > T > > > > On Fri, 8 May 2026 at 01:30, Manfred Moser <[email protected]> wrote: > >> Hi all, > >> > >> Just a quick question regarding 3.10.x. From what I understand this will > >> bring the newer resolver version to 3.x and that is GREAT (even though I > >> would rather see 4.x but thats a different story). So here is my question > >> > >> Is the changed default to activate the checksum verification going to be > >> part of 3.10? > >> > >> From what I understand this was going to be part of 4.x and so I am > >> wondering if we are essentially also getting this one early? > >> > >> Or did I get this checksum stuff all completely confused? ;-) > >> > >> Manfred > >> > >> PS: Adam Kaplan and myself will present about "Is Maven safe for > >> production?" at the Open Source Summit and OpenSSF community day in > >> Minneapolis in two weeks and would love to have you in the audience and > >> for a chat afterwards.. > >> https://events.linuxfoundation.org/open-source-summit-north-america/ > >> > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [email protected] > >> For additional commands, e-mail: [email protected] > >> > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
