On Thu, Oct 18, 2018 at 8:24 AM Konrad Windszus <konra...@gmx.de> wrote: > ...Also compare with > https://maven.apache.org/developers/release/maven-project-release-procedure.html. > This is currently a process decoupled from the staging repo unfortunately...
I haven't followed all the details but I think https://issues.apache.org/jira/browse/INFRA-14923 can get in the way. Note that http://www.apache.org/dev/release-distribution#sigs-and-sums now says SHOULD supply sha-512 and SHOULD NOT supply md5. IIUC those requirements have been relaxed from MUST to SHOULD for now as the tooling is not fully in place depending on your release process. Which means it's fine to postpone those changes until the tooling is here, if that makes things easier. -Bertrand
