[
https://issues.apache.org/jira/browse/MWRAPPER-150?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17883041#comment-17883041
]
ASF GitHub Bot commented on MWRAPPER-150:
-----------------------------------------
jon-signal opened a new pull request, #155:
URL: https://github.com/apache/maven-wrapper/pull/155
The version of `sha256sum` that ships with macOS Sequoia appears to have a
bug where it does not read from stdin by default, even though its `man` page
says, in part (emphasis added):
> In all cases, each file listed on the command line is processed
separately. **If no files are listed on the command line**, or a file name is
given as -, input is taken from stdin instead.
…but invoking `sha256` as it appears in the `mvnw` script does not work as
expected:
```sh
❯ echo '3d8f20ce6103913be8b52aef6d994e0c54705fb527324ceb9b835b338739c7a8
/Users/jon/REDACTED/.mvn/wrapper/maven-wrapper.jar' | sha256sum -c
usage: sha256sum [-bctwz] [files ...]
```
…which in turns to a non-successful exit code, which in turn leads to a
(rather alarming!) warning about a mismatched checksums and possible compromise.
Adding a `-` explicitly calls for `sha256sum` to read from stdin.
----
To make clear that you license your contribution under
the [Apache License Version 2.0, January
2004](http://www.apache.org/licenses/LICENSE-2.0)
you have to acknowledge this by using the following check-box.
- [x] I hereby declare this contribution to be licenced under the [Apache
License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
- [ ] In any other case, please file an [Apache Individual Contributor
License Agreement](https://www.apache.org/licenses/icla.pdf).
> Fails to validate checksums on MacOS Sequoia
> --------------------------------------------
>
> Key: MWRAPPER-150
> URL: https://issues.apache.org/jira/browse/MWRAPPER-150
> Project: Maven Wrapper
> Issue Type: Bug
> Components: Maven Wrapper Scripts
> Affects Versions: 3.3.2
> Environment: MacOS 15.0
> Reporter: Gonzalo Bermúdez
> Priority: Normal
>
> The command issued to check the sha256sum fails with sha256sum packaged with
> MacOS Sequoia.
> This can be reproduced with an empty project using mvnw, and adding the
> distribution's shasum on the affected OS.
>
> {code:java}
> $ mkdir test && cd test
> $ mvn wrapper:wrapper
> $ echo
> distributionSha256Sum=83aaf914c785c9faed661f223000a92d1de9553f5c82d3b4362e66d9c031625f
> >> .mvn/wrapper/maven-wrapper.properties
> $ ./mvnw compile
> {code}
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
