Re: Checksum default and 3.10

Wait,

you mean --strict-checksums option or "provided/trusted checksums" feature?
Latter cannot be active by default, as it requires user input.

T

On Fri, 8 May 2026 at 03:41, Manfred Moser <[email protected]> wrote:
>
> oh .. I thought with Maven 4 it will be active by default.
>
> Manfred
>
> On 2026-05-07 16:58, Tamás Cservenák wrote:
> > Howdy,
> >
> > checksum verification is the same in Maven 3 and Maven 4 (not active by def).
> >
> > Or I may miss your question, what do you mean by "changed default to
> > activate the checksum verification"?
> >
> > Thanks
> > T
> >
> > On Fri, 8 May 2026 at 01:30, Manfred Moser <[email protected]> wrote:
> >> Hi all,
> >>
> >> Just a quick question regarding 3.10.x. From what I understand this will
> >> bring the newer resolver version to 3.x and that is GREAT (even though I
> >> would rather see 4.x but thats a different story). So here is my question
> >>
> >> Is the changed default to activate the checksum verification going to be
> >> part of 3.10?
> >>
> >>   From what I understand this was going to be part of 4.x and so I am
> >> wondering if we are essentially also getting this one early?
> >>
> >> Or did I get this checksum stuff all completely confused? ;-)
> >>
> >> Manfred
> >>
> >> PS: Adam Kaplan and myself will present about "Is Maven safe for
> >> production?" at the Open Source Summit and OpenSSF community day in
> >> Minneapolis in two weeks and would love to have you in the audience and
> >> for a chat afterwards..
> >> https://events.linuxfoundation.org/open-source-summit-north-america/
> >>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: [email protected]
> >> For additional commands, e-mail: [email protected]
> >>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>