Re: Checksum default and 3.10
Manfred Moser <[email protected]>
| Newsgroups | gmane.comp.jakarta.turbine.maven.devel |
|---|---|
| Message-ID | <[email protected]> |
I just recall vaguely that something will change to on by default. It might be that or I might be wrong. Manfred On 2026-05-08 02:19, Tamás Cservenák wrote: > Wait, > > you mean --strict-checksums option or "provided/trusted checksums" feature? > Latter cannot be active by default, as it requires user input. > > T > > On Fri, 8 May 2026 at 03:41, Manfred Moser <[email protected]> wrote: >> oh .. I thought with Maven 4 it will be active by default. >> >> Manfred >> >> On 2026-05-07 16:58, Tamás Cservenák wrote: >>> Howdy, >>> >>> checksum verification is the same in Maven 3 and Maven 4 (not active by def). >>> >>> Or I may miss your question, what do you mean by "changed default to >>> activate the checksum verification"? >>> >>> Thanks >>> T >>> >>> On Fri, 8 May 2026 at 01:30, Manfred Moser <[email protected]> wrote: >>>> Hi all, >>>> >>>> Just a quick question regarding 3.10.x. From what I understand this will >>>> bring the newer resolver version to 3.x and that is GREAT (even though I >>>> would rather see 4.x but thats a different story). So here is my question >>>> >>>> Is the changed default to activate the checksum verification going to be >>>> part of 3.10? >>>> >>>> From what I understand this was going to be part of 4.x and so I am >>>> wondering if we are essentially also getting this one early? >>>> >>>> Or did I get this checksum stuff all completely confused? ;-) >>>> >>>> Manfred >>>> >>>> PS: Adam Kaplan and myself will present about "Is Maven safe for >>>> production?" at the Open Source Summit and OpenSSF community day in >>>> Minneapolis in two weeks and would love to have you in the audience and >>>> for a chat afterwards.. >>>> https://events.linuxfoundation.org/open-source-summit-north-america/ >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: [email protected] >>>> For additional commands, e-mail: [email protected] >>>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [email protected] >>> For additional commands, e-mail: [email protected] >>> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] >