v 1.6.1 restores some checksums:
maven-metadata.md5andmaven-metadata.sha1(becausemavenoutputs a scary warning without them)- All the
.sha512checksums (because Gradle uses them to validate caches contents)
All in all, nmcp now publishes .md5, .sha1, .sha512 for all files except for signature files (.asc) where no checksums are required.
Long term, I'd love to drop the .md5 and .sha1 checksums. That would require both maven and Sonatype to stop requesting them.
Many thanks to @marcphilipp and @leonard84 for helping me navigate this issue 💙
On a separate note, this version also deprecates publishAllPublicationsToMavenCentral in favor of using either the aggregation or the settings plugin.