[
https://issues.apache.org/jira/browse/MPOM-244?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17338577#comment-17338577
]
Konrad Windszus edited comment on MPOM-244 at 5/9/21, 3:59 PM:
---------------------------------------------------------------
[~michael-o] We at Apache Sling do that, but more important is that no
additional files are added to dist which are not in the Staging Repo, as the
vote happens on the contents in the stage repo and that should contain
everything about to be released (to Maven Central and/or dist). Also the
source-release artifacts are always attached
(https://github.com/apache/maven-apache-parent/blob/e872a8057d93749d6b3c8ed2d7d3b064076085ab/pom.xml#L382).
was (Author: kwin):
[~michael-o] We at Apache Sling do that, but more important is that no
additional files are added to dist which are not in the Staging Repo, as the
vote happens on the contents in the stage repo and that should contain
everything about to be released (to Maven Central and/or dist).
> Upload SHA-512 to Staging Repository
> ------------------------------------
>
> Key: MPOM-244
> URL: https://issues.apache.org/jira/browse/MPOM-244
> Project: Maven POMs
> Issue Type: Improvement
> Components: asf
> Affects Versions: ASF-23
> Reporter: Konrad Windszus
> Priority: Major
>
> As now the ASF staging repository supports SHA2 hashes
> (https://issues.apache.org/jira/browse/INFRA-14923) they should be generated
> for
> - all attached artifacts and
> - deployed to the Staging repository (i.e. attached to build as well)
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
