Skip to content

[pull] main from apache:main#169

Merged
pull[bot] merged 1 commit into
sudoevans:mainfrom
apache:main
May 10, 2026
Merged

[pull] main from apache:main#169
pull[bot] merged 1 commit into
sudoevans:mainfrom
apache:main

Conversation

@pull

@pull pull Bot commented May 10, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Surfaced during 0.42.0-incubating RC3 verification: the .sha512 files
shipped on dist.apache.org contain only the bare hex digest, so the
standard 'sha512sum -c file.sha512' recipe returns 'no properly
formatted checksum lines found'. Voters either have to work around it
with 'echo "$(cat ${F}.sha512)  ${F}" | sha512sum -c -' (as the
README currently does) or compare digests by hand.

Switch _checksum_artifact() to emit the standard '<digest>  <filename>'
layout that sha512sum -c and shasum -c both expect, and simplify the
verification recipe in scripts/README.md to plain
'sha512sum -c <file>.sha512'.

Both checksum readers in the repo (scripts/verify_apache_artifacts.py
and scripts/apache_release.py::_verify_artifact_checksum) already use
'.read().strip().split()[0]', so they accept both the old and the new
format -- verification of existing RCs on dist.apache.org keeps working
unchanged.

Vote thread:
https://lists.apache.org/thread/bhcwnjpbx7vhnql48z7vc3njpgrx9qmj
@pull pull Bot locked and limited conversation to collaborators May 10, 2026
@pull pull Bot added the ⤵️ pull label May 10, 2026
@pull pull Bot merged commit 30c9b3a into sudoevans:main May 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant