Hi Carsten, > On 9 Sep 2019, at 19:29, Carsten Ziegeler <cziege...@apache.org> wrote: > > Can we maybe also remove the md5 files and create sha512 files, when the > checksum is correct? >
The sha1 and md5 files seem to be generated by Nexus and not by our Maven release process. I quickly checked how the sha512 files are generated and this seems to be a config in the Apache parent pom [4]. However, those are not attached [5] to the build, most probably due to [6]. I guess we can create the sha512 files with this CLI tool, but the value would come only when we’d be able to push the staged artifacts to dist. Cheers, Radu [4] - https://github.com/apache/maven-apache-parent/blob/apache-21/pom.xml#L440 <https://github.com/apache/maven-apache-parent/blob/apache-21/pom.xml#L440> [5] - https://checksum-maven-plugin.nicoulaj.net/files-mojo.html#attachChecksums <https://checksum-maven-plugin.nicoulaj.net/files-mojo.html#attachChecksums>[6] - https://issues.apache.org/jira/browse/INFRA-14923 <https://issues.apache.org/jira/browse/INFRA-14923>
