Repository navigation
Release: no SHA256SUMS, no checksum step in the docs #236
Description
Decision (2026-10-17)
Users do not need to check the downloaded binaries against checksums. The release no longer carries SHA256SUMS, and the READMEs and release notes no longer show a checksum check. (OpenIPC/cerberus keeps its SHA256SUMS: its installer verifies the downloads.)
Task
- Release: stop creating and publishing
SHA256SUMS; drop the "Check:sha256sum -c SHA256SUMS" line from the release notes; remove theSHA256SUMSasset from the currentlatest. - READMEs (all three) and
docs/: removeSHA256SUMSfrom the file tables and thesha256sumstep from the download examples. - Checks that are internal to the build stay (pinned checksums of downloaded toolchains and sources, integrity of artifacts between CI jobs).
- Workflow and docs only: no version bump.
Activity
ci: the publish comment no longer mentions SHA256SUMS (#236)
release: a left-over SHA256SUMS is removed only if present, and a fai…
release: a left-over SHA256SUMS is removed only if present, and a fai…
release: a failed asset lookup stops the cleanup of SHA256SUMS (#236)
release: a failed asset lookup stops the cleanup of SHA256SUMS (#236)
Merge pull request #237 from OpenIPC/release/no-sha256sums
Merge pull request #238 from OpenIPC/release/no-sha256sums-basic
compot-dev commentedon Oct 17, 2026
Done: #237 (
v2) and #238 (basic).latestno longer hasSHA256SUMS(the first publish removed it), the notes and READMEs no longer show a checksum check.