diff --git a/Reproducible-Build-Hashes.md b/Reproducible-Build-Hashes.md index 5cb4caa..f3b47f8 100644 --- a/Reproducible-Build-Hashes.md +++ b/Reproducible-Build-Hashes.md @@ -2,7 +2,11 @@ Since version 0.2.3, all builds of PGPainless are reproducible, given that they Here is a list of known hashes, generated by running `./gradlew --quiet clean build &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar` -These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). +These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). +To quickly fetch those checksums, you can use e.g. +```shell +gradle -Prelease=1.1.3 mavenCentralChecksums +``` *Releases prior to 1.3.1 were built without static file modes. This resulted in the checksum of the 1.2.2 release to mismatch, as I built it on my laptop which used different file permissions.