[MPOM-244] Deploy SHA-512 for source-release to Remote Repository

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: ASF-23
• Fix Version/s: ASF-24
• Component/s: asf
• Assignee: Herve Boutemy
• Reporter: Konrad Windszus
• Created: 22/May/20 06:45
• Updated: 07/Jan/22 07:08
• Resolved: 06/Jul/21 06:09

Description

As now the ASF staging repository supports SHA2 hashes (https://issues.apache.org/jira/browse/INFRA-14923) they should be generated for

• the ASF source release artifact (as recommended in https://infra.apache.org/release-distribution.html#sigs-and-sums)
• deployed to the Staging repository (i.e. attached to build as well)

Issue Links

• depends upon: MPOM-205 create SHA-512 checksum for source-release archive(s) in target/checkout/target/ during release
• is blocked by: MRESOLVER-56 Support SHA-256 and SHA-512 as checksums
• is related to: MPOM-282 Create correct SHA512 content
• relates to: MINSTALL-138 option to calculate more checksum such sha-256 sha-512
• relates to: SLING-7534 Release policy - stop providing MD5 and start providing SHA-512 checksums
• links to: GitHub Pull Request #40