[MSHARED-922] Remove checksum creation from DefaultProjectDeployer

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: maven-artifact-transfer-0.12.0
• Fix Version/s: maven-artifact-transfer-0.13.1
• Component/s: maven-artifact-transfer
• Assignee: Michael Osipov
• Reporter: Konrad Windszus
• Created: 10/Jun/20 10:22
• Updated: 08/Nov/22 13:32
• Resolved: 11/Jun/20 19:59

Description

Currently there are checksums (MD5/SHA1) being created at https://github.com/apache/maven-artifact-transfer/blob/87842f9c712eb6496b32d4aff09307d0970d9f7b/src/main/java/org/apache/maven/shared/transfer/project/deploy/internal/DefaultProjectDeployer.java#L130 which is used e.g. from the maven-deploy-plugin.

IMHO only the Maven-Resolver should ever create checksums as this is also the only code leveraging the checksums. There is already code for that at https://github.com/apache/maven-resolver/blob/47edcfe69c4e52ced4cb93d65b7348b5645cdd68/maven-resolver-connector-basic/src/main/java/org/eclipse/aether/connector/basic/BasicRepositoryConnector.java#L557.

Issue Links

• is related to: MDEPLOY-231 Move checksum generation from install to deploy plugin
• is related to: MDEPLOY-271 Allow to optionally disable checksum creation
• relates to: MRESOLVER-56 Support SHA-256 and SHA-512 as checksums
• links to: GitHub Pull Request #8
• links to: GitHub Pull Request #16