Richard Eckart de Castilho created UIMA-5856:
------------------------------------------------

             Summary: Use modern checksum algorithms during release
                 Key: UIMA-5856
                 URL: https://issues.apache.org/jira/browse/UIMA-5856
             Project: UIMA
          Issue Type: Improvement
          Components: Build, Packaging and Test
            Reporter: Richard Eckart de Castilho
             Fix For: 12


Apache policy requires that we drop generating MD5 / SHA1 checksums and switch:

 -- for new releases :
    -- you MUST supply a SHA-256 and/or SHA-512 file
    -- you SHOULD NOT supply MD5 or SHA-1 files

Best place to do this would be the parent-pom.

Its a bit of a blocker for producing any new releases unless sub-projects 
override all the code-signing provisions in the UIMA parent pom.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to