broken checksums in maven artefacts for rc4 about google-collections

[GoogleCodeExporter]

Yes, it was generated using maven 2.2. I assumed it was safe to use the latest
version of Maven.

How serious is this? Should I build and deploy a new rc4 with a Maven 2.1? 
Should I
give it a different version, like 1.0-rc4b?

Original comment by [email protected] on 13 Nov 2009 at 1:41

• Changed state: Accepted

[GoogleCodeExporter]

Hi Jared,

The problem is caused when deploying to a repository that requires http
authentication. A change was made in 2.2.x to switch from j.u.httpclient to
org.apache.httpclient (from memory) which doesnt' submit authentication 
information
unless it receives a 401. This causes the output stream to be transmitted twice,
which produces the wrong checksum on the checksumming wrapped of the output 
stream.

The most recent issue for this is http://jira.codehaus.org/browse/MNG-4301

You can safely fix the checksum in your repository. I've attached a script to 
fix the
checksums

Original comment by [email protected] on 13 Nov 2009 at 2:25

Attachments:

• update-maven-checksums.sh

[GoogleCodeExporter]

Hi Jared,

What is the resolution here, are you going to fix the checksums in your repo, 
or wait for rc-5 ?

Cheers

Dave

Original comment by [email protected] on 18 Nov 2009 at 6:51

[GoogleCodeExporter]

Hi Jared,

Is there any update on a resolution ?

Cheers

Dave

Original comment by [email protected] on 3 Dec 2009 at 6:07

[GoogleCodeExporter]

Jared, this makes the library unusable from maven as it flags the library as 
corrupted when it downloads it (as do 
various proxies). We can get around this internally as we can deploy the 
correct checksums, but we cannot use it 
as an external dependency as our users will all get failing builds.

We have rolled back rc4 support until this issue is fixed.

Original comment by [email protected] on 4 Dec 2009 at 12:45

[GoogleCodeExporter]

We just released rc5, with a Maven package generated by Maven 2.0.10.

There's no longer a reason to fix the rc4 checksum.

Original comment by [email protected] on 11 Dec 2009 at 9:13

• Changed state: WontFix