pzygielo commented on PR #127:
URL: https://github.com/apache/maven-gpg-plugin/pull/127#issuecomment-3506500534

   Yes.
   
   <img width="864" height="101" alt="image" 
src="https://github.com/user-attachments/assets/e21f4514-c2a9-4f45-974f-241ad276f922";
 />
   
   <img width="701" height="150" alt="image" 
src="https://github.com/user-attachments/assets/47c6f780-9bbc-4f21-af1d-8fb8a7cefdda";
 />
   
   but
   
   <img width="410" height="57" alt="image" 
src="https://github.com/user-attachments/assets/40ab5d6a-d60f-4609-a9fa-0650a5118dbc";
 />
   
   
   which is
   
   - https://github.com/dependabot/dependabot-core/issues/4821
   
   -----
   
   But I'm here for different reason. Seems that after 
cb1236c251b458918b5a7b5b7d240315d5ab6430 `3.2.8:sign` ALWAYS does
   ```
   Downloading from X: .../org/bouncycastle/bcprov-jdk18on/maven-metadata.xml
   Downloading from Y: .../org/bouncycastle/bcprov-jdk18on/maven-metadata.xml
   Downloaded from Y: .../org/bouncycastle/bcprov-jdk18on/maven-metadata.xml 
(728 B at 19 kB/s)
   Downloading from X: .../org/bouncycastle/bcutil-jdk18on/maven-metadata.xml
   Downloading from Y: .../org/bouncycastle/bcutil-jdk18on/maven-metadata.xml
   Downloaded from Y: .../org/bouncycastle/bcutil-jdk18on/maven-metadata.xml 
(728 B at 73 kB/s)
   ```
   
   But it's fine in master since 31e2fbb93d9b5c71298ec7698a14560d036af56b.
   So waiting for new plugin releases to have it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to