You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@creadur.apache.org by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/03/16 22:25:00 UTC

[jira] [Created] (RAT-534) Improve release verification and digest creation

Philipp Ottlinger created RAT-534:
-------------------------------------

             Summary: Improve release verification and digest creation
                 Key: RAT-534
                 URL: https://issues.apache.org/jira/browse/RAT-534
             Project: Apache RAT
          Issue Type: Task
          Components: build
    Affects Versions: 0.18
            Reporter: Philipp Ottlinger


During release vote of 0.18 [~claude] pointed to 
https://apache.org/info/verification.html
and mentioned that SHA-256 and SHA-512 should be created during the release build
(in <=0.18 the checksums were generated manually before uploading to ASF dist area).

Over at Maven
https://github.com/apache/maven/blob/master/apache-maven/pom.xml#L376
https://github.com/nicoulaj/checksum-maven-plugin/tree/master
is used to automate this part of releases.

Evaluate and integrate into RAT.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)