[ https://issues.apache.org/jira/browse/MPOM-244?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Scholte reopened MPOM-244: --------------------------------- The plugin fails when using Maven 3.1.1 and calling {{mvn verify -Papache-release}} The minimalMavenBuildVersion is 3.1.1, however the plugin net.nicoulaj.maven.plugins:checksum-maven-plugin:1.10 requires Maven version 3.2.5. When using Maven 3.1.1 you cannot skip this plugin. Either the minimum should be lifted to 3.2.5 or (which I prefer) the checksum-maven-plugin should be moved to a profile as done for the maven-artifact-plugin: {code:xml} <profile> <id>pgpverify</id> <activation> <property> <name>pgpverify.skip</name> <value>!true</value> </property> </activation> <build> <plugins> <plugin> <groupId>org.simplify4u.plugins</groupId> <artifactId>pgpverify-maven-plugin</artifactId> <executions> <execution> <goals> <goal>check</goal> </goals> </execution> </executions> </plugin> </plugins> </build> </profile> {code} > Deploy SHA-512 for source-release to Remote Repository > ------------------------------------------------------ > > Key: MPOM-244 > URL: https://issues.apache.org/jira/browse/MPOM-244 > Project: Maven POMs > Issue Type: Improvement > Components: asf > Affects Versions: ASF-23 > Reporter: Konrad Windszus > Assignee: Herve Boutemy > Priority: Major > Fix For: ASF-24 > > > As now the ASF staging repository supports SHA2 hashes > (https://issues.apache.org/jira/browse/INFRA-14923) they should be generated > for > - the ASF source release artifact (as recommended inĀ > https://infra.apache.org/release-distribution.html#sigs-and-sums) > - deployed to the Staging repository (i.e. attached to build as well) -- This message was sent by Atlassian Jira (v8.3.4#803005)