You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by kw...@apache.org on 2021/05/05 13:05:48 UTC

[sling-parent] branch master updated: SLING-7534 generate sha-512 hashes by default and also attach to build (#10)

This is an automated email from the ASF dual-hosted git repository.

kwin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-parent.git


The following commit(s) were added to refs/heads/master by this push:
     new d5590df  SLING-7534 generate sha-512 hashes by default and also attach to build (#10)
d5590df is described below

commit d5590df5680dc569a8598918fa7fadfbe7bab975
Author: Konrad Windszus <kw...@apache.org>
AuthorDate: Wed May 5 15:05:39 2021 +0200

    SLING-7534 generate sha-512 hashes by default and also attach to build (#10)
---
 pom.xml              |  1 -
 sling-parent/pom.xml | 60 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 59 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 4ef73a2..95a820d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,6 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-deploy-plugin</artifactId>
-                <version>3.0.0-M1</version>
                 <configuration>
                     <!--  don't deploy reactor module itself -->
                     <skip>true</skip>
diff --git a/sling-parent/pom.xml b/sling-parent/pom.xml
index 8246083..87253c1 100644
--- a/sling-parent/pom.xml
+++ b/sling-parent/pom.xml
@@ -70,7 +70,6 @@
         <tag>sling-parent-reactor-41</tag>
     </scm>
 
-
     <reporting>
         <plugins>
             <plugin>
@@ -368,12 +367,71 @@
                         </execution>
                     </executions>
                 </plugin>
+                <plugin>
+                    <groupId>net.nicoulaj.maven.plugins</groupId>
+                    <artifactId>checksum-maven-plugin</artifactId>
+                    <version>1.10.0</version>
+                </plugin>
             </plugins>
         </pluginManagement>
     </build>
 
     <profiles>
         <profile>
+            <id>apache-release</id>
+            <build>
+                <plugins>
+                    <!-- generate additional sha512 checksums for some attached artifacts (not supported by ASF parent pom yet, https://issues.apache.org/jira/browse/MPOM-244) -->
+                    <plugin>
+                        <groupId>net.nicoulaj.maven.plugins</groupId>
+                        <artifactId>checksum-maven-plugin</artifactId>
+                        <version>1.10</version>
+                        <executions>
+                            <execution>
+                                <id>source-release-attached-checksum</id>
+                                <goals>
+                                    <goal>artifacts</goal>
+                                </goals>
+                                <!-- make sure this is executed prior maven-gpg-plugin:sign -->
+                                <phase>post-integration-test</phase>
+                                <configuration>
+                                    <algorithms>
+                                        <algorithm>SHA-512</algorithm>
+                                    </algorithms>
+                                    <!-- make sure to attach to also upload to staging repo (https://issues.apache.org/jira/browse/INFRA-14923) -->
+                                    <attachChecksums>true</attachChecksums>
+                                    <!-- generate additional SHA-512-checksums for source-release artifact -->
+                                    <includeClassifiers>source-release</includeClassifiers>
+                                    <excludeMainArtifact>true</excludeMainArtifact>
+                                </configuration>
+                            </execution>
+                            <!-- disable execution from asf parent -->
+                            <execution>
+                                <id>source-release-checksum</id>
+                                <phase>invalid</phase>
+                            </execution>
+                        </executions>
+                    </plugin>
+                    <plugin>
+                        <groupId>org.apache.maven.plugins</groupId>
+                        <artifactId>maven-gpg-plugin</artifactId>
+                        <executions>
+                            <execution>
+                              <id>sign-release-artifacts</id>
+                              <configuration>
+                                  <!-- don't sign SHA-512 checksums (in addition to default MD5 and SHA1) -->
+                                  <!-- This does not work in version 1.6 due to https://issues.apache.org/jira/browse/MGPG-66 -->
+                                  <excludes>
+                                      <exclude>**/*.sha512</exclude>
+                                  </excludes>
+                              </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+        <profile>
             <id>jacoco-report</id>
             <build>
                 <plugins>