remove sha256 (#226)

apache · Dec 13, 2024 · 88bbae3 · 88bbae3
1 parent a701ade
commit 88bbae3
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 6 deletions.
diff --git a/.github/workflows/rc.yml b/.github/workflows/rc.yml
@@ -67,7 +67,6 @@ jobs:
           tar_gz="${id}.tar.gz"
           echo "TAR_GZ=${tar_gz}" >> ${GITHUB_ENV}
           git archive HEAD --prefix "${id}/" --output "${tar_gz}"
-          sha256sum "${tar_gz}" > "${tar_gz}.sha256"
           sha512sum "${tar_gz}" > "${tar_gz}.sha512"
       - name: Audit
         run: |

diff --git a/dev/release/README.md b/dev/release/README.md
@@ -89,7 +89,7 @@ You must install the following to run the script:
 
     * `curl`
     * `gpg`
-    * `shasum` or `sha256sum`/`sha512sum`
+    * `shasum` or `sha512sum`
     * `tar`
 
 You don't need to have Go installed, if it isn't on the system the latest Go will be

diff --git a/dev/release/verify_rc.sh b/dev/release/verify_rc.sh
@@ -89,10 +89,8 @@ import_gpg_keys() {
 }
 
 if type shasum >/dev/null 2>&1; then
-  sha256_verify="shasum -a 256 -c"
   sha512_verify="shasum -a 512 -c"
 else
-  sha256_verify="sha256sum -c"
   sha512_verify="sha512sum -c"
 fi
 
@@ -102,8 +100,6 @@ fetch_archive() {
     download_rc_file "${ARCHIVE_BASE_NAME}.tar.gz.asc"
     gpg --verify "${ARCHIVE_BASE_NAME}.tar.gz.asc" "${ARCHIVE_BASE_NAME}.tar.gz"
   fi
-  download_rc_file "${ARCHIVE_BASE_NAME}.tar.gz.sha256"
-  ${sha256_verify} "${ARCHIVE_BASE_NAME}.tar.gz.sha256"
   download_rc_file "${ARCHIVE_BASE_NAME}.tar.gz.sha512"
   ${sha512_verify} "${ARCHIVE_BASE_NAME}.tar.gz.sha512"
 }