1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-11-16 01:12:05 +01:00

Updated Reproducible Build Hashes (markdown)

Paul Schaub 2022-12-05 13:51:38 +01:00
parent 9c61a325f8
commit c76d46b577

@ -3,6 +3,10 @@ Here is a list of known hashes, generated by running
`./gradlew --quiet clean build &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar` `./gradlew --quiet clean build &> /dev/null && sha256sum {pgpainless-core,pgpainless-sop,pgpainless-cli}/build/libs/*.jar`
These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)). These hashes should match those published to the maven repositories (e.g. [pgpainless-core-1.1.3.jar.sha256](https://repo1.maven.org/maven2/org/pgpainless/pgpainless-core/1.1.3/pgpainless-core-1.1.3.jar.sha256)).
To quickly fetch those checksums, you can use e.g.
```shell
gradle -Prelease=1.1.3 mavenCentralChecksums
```
*Releases prior to 1.3.1 were built without static file modes. *Releases prior to 1.3.1 were built without static file modes.
This resulted in the checksum of the 1.2.2 release to mismatch, as I built it on my laptop which used different file permissions. This resulted in the checksum of the 1.2.2 release to mismatch, as I built it on my laptop which used different file permissions.