This is an automated email from the ASF dual-hosted git repository. asf-gitbox-commits pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/ant.git
commit 0f74677fea86d43190a93194902790eb054d461a Author: Stefan Bodewig <[email protected]> AuthorDate: Tue Jul 21 18:39:37 2026 +0200 more signing of SBOMs --- ReleaseInstructions | 2 +- release/signit.xml | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/ReleaseInstructions b/ReleaseInstructions index 52fc61624..1417c9ad3 100644 --- a/ReleaseInstructions +++ b/ReleaseInstructions @@ -157,7 +157,7 @@ Note: This document was adapted from the one created in the context of b. Using gpg - $ for i in distribution/*/*.zip distribution/*/*.gz distribution/*/*.bz2 distribution/*/*.xz; do gpg --use-agent --detach-sign --armor $i; done + $ for i in distribution/*/*.zip distribution/*/*.gz distribution/*/*.bz2 distribution/*/*.xz distribution/*/*.cdx.xml distribution/*/*.cdx.json; do gpg --use-agent --detach-sign --armor $i; done $ for i in java-repository/org/apache/ant/ant*/*/*.jar java-repository/org/apache/ant/ant*/*/*.pom java-repository/org/apache/ant/ant*/*/*.cdx.*; do gpg --use-agent --detach-sign --armor $i; done 11. Convert the part of the WHATSNEW file covering the changes diff --git a/release/signit.xml b/release/signit.xml index 5fc224f65..a029ee53f 100644 --- a/release/signit.xml +++ b/release/signit.xml @@ -40,11 +40,14 @@ <fileset dir="../java-repository"> <include name="**/*.jar"/> <include name="**/*.pom"/> + <include name="**/*.cdx.*"/> </fileset> <fileset dir="../distribution"> <include name="**/*.bz2"/> <include name="**/*.zip"/> <include name="**/*.gz"/> + <include name="**/*.cdx.json"/> + <include name="**/*.cdx.xml"/> </fileset> </signer>
