sbt/lm-ivy/src
Dairus 7368252678
[2.x] fix: Skip checksums for PGP signature files (.asc) (#8535)
## Problem
When using `publishSigned` (via sbt-pgp), sbt creates checksum files (e.g., `.pom.asc.sha1`) for PGP signature files (`.asc`). This violates Maven norms, where checksums should only be generated for raw artifacts like JARs and POMs, not for signatures.

## Solution
Modified the checksum generation logic in `ChecksumFriendlyURLResolver.put` (in `lm-ivy/src/main/scala/sbt/internal/librarymanagement/ConvertResolver.scala`) to skip generating checksums for artifacts whose names end with `.asc`.
2026-01-15 01:04:33 -05:00
..
main [2.x] fix: Skip checksums for PGP signature files (.asc) (#8535) 2026-01-15 01:04:33 -05:00
test Refactor applyDependencyOverrides into testable function 2026-01-11 01:40:51 +02:00