PGPainless/pgpainless
PGPainless/pgpainless
1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-06-18 09:34:51 +02:00
Code Issues Releases Wiki Activity

Updated Reproducible Build Hashes (markdown)

Paul Schaub 2022-12-05 13:51:38 +01:00
parent 9c61a325f8
commit c76d46b577
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Reproducible-Build-Hashes.md

@ -2,7 +2,11 @@ Since version 0.2.3, all builds of PGPainless are reproducible, given that they
Here is a list of known hashes, generated by running
`./gradlew --quiet clean build &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar`
These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)).
These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)).
To quickly fetch those checksums, you can use e.g.
```shell
gradle -Prelease=1.1.3 mavenCentralChecksums
```
*Releases prior to 1.3.1 were built without static file modes.
This resulted in the checksum of the 1.2.2 release to mismatch, as I built it on my laptop which used different file permissions.