[ https://issues.apache.org/jira/browse/MRESOLVER-680?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17929892#comment-17929892 ]
ASF GitHub Bot commented on MRESOLVER-680: ------------------------------------------ thomasleplus opened a new pull request, #659: URL: https://github.com/apache/maven-resolver/pull/659 The need for this change was confirmed with sigstore team in this [discussion](https://github.com/sigstore/sigstore-java/issues/905#issuecomment-2677275304). This change was already done in [Maven GPG plugin](https://issues.apache.org/jira/browse/MGPG-130). > Disable checksum by default for .sigstore.json instead of .sigstore > ------------------------------------------------------------------- > > Key: MRESOLVER-680 > URL: https://issues.apache.org/jira/browse/MRESOLVER-680 > Project: Maven Resolver > Issue Type: Improvement > Components: Resolver > Affects Versions: 2.0.6 > Reporter: Thomas Leplus > Priority: Major > > The need for this change was confirmed with sigstore team in this > [discussion|https://github.com/sigstore/sigstore-java/issues/905#issuecomment-2677275304]. > This change was already done in [Maven GPG > plugin|https://issues.apache.org/jira/browse/MGPG-130]. -- This message was sent by Atlassian Jira (v8.20.10#820010)