From c76d46b577578b9cb263a8d7ecec6cba79b89943 Mon Sep 17 00:00:00 2001 From: Paul Schaub Date: Mon, 5 Dec 2022 13:51:38 +0100 Subject: [PATCH] Updated Reproducible Build Hashes (markdown) --- Reproducible-Build-Hashes.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Reproducible-Build-Hashes.md b/Reproducible-Build-Hashes.md index 5cb4caa..f3b47f8 100644 --- a/Reproducible-Build-Hashes.md +++ b/Reproducible-Build-Hashes.md @@ -2,7 +2,11 @@ Since version 0.2.3, all builds of PGPainless are reproducible, given that they Here is a list of known hashes, generated by running `./gradlew --quiet clean build &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar` -These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). +These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). +To quickly fetch those checksums, you can use e.g. +```shell +gradle -Prelease=1.1.3 mavenCentralChecksums +``` *Releases prior to 1.3.1 were built without static file modes. This resulted in the checksum of the 1.2.2 release to mismatch, as I built it on my laptop which used different file permissions.