[jira] [Reopened] (MPOM-244) Deploy SHA-512 for source-release to Remote Repository

["Robert Scholte (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MPOM-244?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Scholte reopened MPOM-244:
---------------------------------

The plugin fails when using Maven 3.1.1 and calling {{mvn verify -Papache-release}}

The minimalMavenBuildVersion is 3.1.1, however the plugin net.nicoulaj.maven.plugins:checksum-maven-plugin:1.10 requires Maven version 3.2.5.
When using Maven 3.1.1 you cannot skip this plugin. 
Either the minimum should be lifted to 3.2.5 or (which I prefer) the checksum-maven-plugin should be moved to a profile as done for the maven-artifact-plugin:

{code:xml}
    <profile>
      <id>pgpverify</id>
      <activation>
        <property>
          <name>pgpverify.skip</name>
          <value>!true</value>
        </property>
      </activation>
      <build>
        <plugins>
          <plugin>
            <groupId>org.simplify4u.plugins</groupId>
            <artifactId>pgpverify-maven-plugin</artifactId>
            <executions>
              <execution>
                <goals>
                  <goal>check</goal>
                </goals>
              </execution>
            </executions>
          </plugin>
        </plugins>
      </build>
    </profile>
{code}


> Deploy SHA-512 for source-release to Remote Repository
> ------------------------------------------------------
>
>                 Key: MPOM-244
>                 URL: https://issues.apache.org/jira/browse/MPOM-244
>             Project: Maven POMs
>          Issue Type: Improvement
>          Components: asf
>    Affects Versions: ASF-23
>            Reporter: Konrad Windszus
>            Assignee: Herve Boutemy
>            Priority: Major
>             Fix For: ASF-24
>
>
> As now the ASF staging repository supports SHA2 hashes (https://issues.apache.org/jira/browse/INFRA-14923) they should be generated for
>  - the ASF source release artifact (as recommended in https://infra.apache.org/release-distribution.html#sigs-and-sums)
>  - deployed to the Staging repository (i.e. attached to build as well)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)