>-----Original Message----- >From: Lukasz Lenart <lukaszlen...@apache.org> >Sent: Wednesday, September 19, 2018 4:12 PM >To: Struts Developers List <dev@struts.apache.org> >Subject: Re: New releases > >śr., 19 wrz 2018 o 12:08 Yasser Zamani <yasserzam...@apache.org> napisał(a): >> -1 as I think this will be error prone and hard to do as a manual >> procedure (ASF says "For every artifact distributed to the public >> through Apache channels" [1] i.e. not only assemblies but also all >> artifacts). I would automate it; as maven seems already is able to >> generate and deploy SHA256/512 sums (with checksum-maven-plugin's >> -DattachChecksums=true). These are what are up to us and Nexus issue >> then is not, I think. > >The cases is that we expose all the zip files on our download page and those >zip >files must have associated sha256/512 signatures. The release plugin doesn't do >this nor Nexus (it generates sha1 files) - we can ask INFRA to change this but >I >assume it is not possible with current version of Nexus. > >So the only solution right now is to generate the missing signatures when we >moving assemblies from Nexus to staging repo. And I don't think this is an >error >prone procedure as we can always re-generate the signatures having the original >files exposed for download. > >https://struts.apache.org/download.cgi#struts2517 >
After a lot of tries, I circled to you :) and should change my -1 to +1. I had thought we should upload checksums for all artifacts but found out it's only needed for artifacts uploaded to dist. So your current closed staging repo for 2.5.18 looks good to me. I also just compiled 2.3.36, closed its staging repo and uploaded assemblies to dist including new checksums generated locally by maven during deployment. Then we may automate this by using checksum-maven-plugin inside assembly module but we have to wait for resolution of [1]. Regards. [1] https://github.com/nicoulaj/checksum-maven-plugin/issues/62#issuecomment-423740418 --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org
