You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by kw...@apache.org on 2021/05/09 15:54:05 UTC

[sling-parent] branch master updated: SLING-7534 don't generate signature for SHA-512 checksum

This is an automated email from the ASF dual-hosted git repository.

kwin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-parent.git


The following commit(s) were added to refs/heads/master by this push:
     new dc0a5b0  SLING-7534 don't generate signature for SHA-512 checksum
dc0a5b0 is described below

commit dc0a5b0c417627edeecf3f2ca6e2af647d29a55b
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Sun May 9 17:53:54 2021 +0200

    SLING-7534 don't generate signature for SHA-512 checksum
---
 sling-parent/pom.xml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/sling-parent/pom.xml b/sling-parent/pom.xml
index c9e6b74..efe39ac 100644
--- a/sling-parent/pom.xml
+++ b/sling-parent/pom.xml
@@ -299,6 +299,12 @@
                         <retryFailedDeploymentCount>10</retryFailedDeploymentCount>
                     </configuration>
                 </plugin>
+                <!-- upgrade from 1.6 in ASF parent -->
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-gpg-plugin</artifactId>
+                    <version>3.0.1</version>
+                </plugin>
                 <!-- only overwrite config for surefire/failsafe -->
                 <plugin>
                     <artifactId>maven-surefire-plugin</artifactId>
@@ -413,18 +419,12 @@
                         </executions>
                     </plugin>
                     <plugin>
+                        <!-- execute signing after sha-512 checksum attachment-->
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-gpg-plugin</artifactId>
                         <executions>
                             <execution>
                               <id>sign-release-artifacts</id>
-                              <configuration>
-                                  <!-- don't sign SHA-512 checksums (in addition to default MD5 and SHA1) -->
-                                  <!-- This does not work in version 1.6 due to https://issues.apache.org/jira/browse/MGPG-66 -->
-                                  <excludes>
-                                      <exclude>**/*.sha512</exclude>
-                                  </excludes>
-                              </configuration>
                             </execution>
                         </executions>
                     </plugin>