jon-signal opened a new pull request, #155: URL: https://github.com/apache/maven-wrapper/pull/155
The version of `sha256sum` that ships with macOS Sequoia appears to have a bug where it does not read from stdin by default, even though its `man` page says, in part (emphasis added): > In all cases, each file listed on the command line is processed separately. **If no files are listed on the command line**, or a file name is given as -, input is taken from stdin instead. …but invoking `sha256` as it appears in the `mvnw` script does not work as expected: ```sh ❯ echo '3d8f20ce6103913be8b52aef6d994e0c54705fb527324ceb9b835b338739c7a8 /Users/jon/REDACTED/.mvn/wrapper/maven-wrapper.jar' | sha256sum -c usage: sha256sum [-bctwz] [files ...] ``` …which in turns to a non-successful exit code, which in turn leads to a (rather alarming!) warning about a mismatched checksums and possible compromise. Adding a `-` explicitly calls for `sha256sum` to read from stdin. ---- To make clear that you license your contribution under the [Apache License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0) you have to acknowledge this by using the following check-box. - [x] I hereby declare this contribution to be licenced under the [Apache License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0) - [ ] In any other case, please file an [Apache Individual Contributor License Agreement](https://www.apache.org/licenses/icla.pdf). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
