Fwd: New release distribution checksum policy

2018-08-23 Thread Thomas Vandahl
Shall we use this for commons-parent? Bye, Thomas. Forwarded Message Subject: Re: New release distribution checksum policy Date: Thu, 23 Aug 2018 08:02:45 +0200 From: Hervé BOUTEMY Reply-To: memb...@apache.org To: memb...@apache.org FYI, Apache parent POM 21 has been released

Fwd: New release distribution checksum policy

2018-08-13 Thread Gary Gregory
TLDR; The release distribution checksum policy requires new releases to use SHA-512 or SHA-256 and not SHA-1 for verification. Existing releases do not need to be changed. Releases still need to be signed via detached PGP signatures. -- Forwarded message - From: Craig Russell