felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Benson Margulies <bimargul...@gmail.com>
Subject Re: [RESULT] [VOTE] Release Apache Maven Bundle Plugin version 3.0.1
Date Fri, 13 Nov 2015 12:07:52 GMT
The only things in the dist area should be the source release zip,
it's detached signature file, and its md5 and sha1 files.

On Fri, Nov 13, 2015 at 6:35 AM, Stuart McCulloch <mcculls@gmail.com> wrote:
> Those files are extraneous artifacts from old Maven releases (where everything got a
checksum, even signature files) - this was fixed in https://issues.apache.org/jira/browse/MNG-5504
>
> They aren’t exposed from the site download page, and don’t provide any extra security
over the existing checksums/signatures of the primary files - so can be cleaned up for consistency
>
> On Friday, 13 November 2015 at 11:19, Pierre De Rop wrote:
>
>> I will try to do it, but before I have a question:
>>
>> it seems that there is a diff between the files currently committed in the
>> Felix release repository and this new release candidate: Indeed, in the
>> release repository, we currently have the following signatures files that
>> are not present in this new release candidate:
>>
>> from https://dist.apache.org/repos/dist/release/felix/:
>>
>> maven-bundle-plugin-3.0.0.jar.asc.md5
>> maven-bundle-plugin-3.0.0.jar.asc.sha1
>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.md5
>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.sha1
>> maven-bundle-plugin-3.0.0.pom.asc.md5
>> maven-bundle-plugin-3.0.0.pom.asc.sha1
>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.md5
>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.sha1
>> maven-bundle-plugin-3.0.0-source-release.zip.asc.md5
>> maven-bundle-plugin-3.0.0-source-release.zip.asc.sha1
>> maven-bundle-plugin-3.0.0-sources.jar.asc.md5
>> maven-bundle-plugin-3.0.0-sources.jar.asc.sha1
>>
>> I guess that in the previous release (currently in the felix release repo),
>> the above files were not necessary.
>> I just would like that someone confirms this ?
>>
>> thanks;
>>
>> -> Pierre
>>
>>
>>
>> On Wed, Nov 11, 2015 at 7:41 PM, Benson Margulies <bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
>> wrote:
>>
>> > I'll send the announcement when I get word that someone has committed
>> > the release package to the dist area.
>> >
>> >
>> > On Wed, Nov 11, 2015 at 1:22 PM, Benson Margulies <bimargulies@gmail.com
(mailto:bimargulies@gmail.com)>
>> > wrote:
>> > > Hi, the vote has passed with the following result:
>> > >
>> > > +1 (binding):
>> > >
>> > > Pierre De Rop
>> > > David Bosschaert
>> > > Stuart McCulloch
>> > >
>> > > +1 (not binding):
>> > >
>> > > Stefan Seifart, Jean-Baptiste Onofré, Jamie Goodyear.
>> > >
>> > > I will promote. PMC members, one of you has to put the source into the
>> > > distro area, I cannot.
>> > >
>> > >
>> > >
>> > > On Wed, Nov 11, 2015 at 1:14 PM, Pierre De Rop <pierre.derop@gmail.com
(mailto:pierre.derop@gmail.com)>
>> > wrote:
>> > > > Hello Benson,
>> > > >
>> > > > I was about to vote: +1
>> > > >
>> > > > regards;
>> > > > /Pierre
>> > > >
>> > > > On Wed, Nov 11, 2015 at 7:12 PM, Benson Margulies <
>> > bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
>> > > > wrote:
>> > > >
>> > > > > We are still one PMC vote short here.
>> > > > >
>> > > > > On Tue, Nov 10, 2015 at 7:13 PM, Jamie G. <jamie.goodyear@gmail.com
(mailto:jamie.goodyear@gmail.com)>
>> > > > > wrote:
>> > > > > > +1 (non-binding)
>> > > > > >
>> > > > > > On Tue, Nov 10, 2015 at 11:50 AM, Benson Margulies
>> > > > > > <bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
wrote:
>> > > > > > > Thank You. Perhaps I will change that doc page to mention
that a PMC
>> > > > > > > member might be required.
>> > > > > > >
>> > > > > > > On Tue, Nov 10, 2015 at 7:30 AM, Stuart McCulloch <
>> > mcculls@gmail.com (mailto:mcculls@gmail.com)>
>> > > > > wrote:
>> > > > > > > > No worries, I’ve just added your key and confirmed
it matches the
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > >
>> >
>> > one
>> > > > > used to sign the artifacts
>> > > > > > > >
>> > > > > > > > On Tuesday, 10 November 2015 at 12:15, Benson
Margulies wrote:
>> > > > > > > >
>> > > > > > > > > No can do with the signature. As a mere committer,
I can't commit
>> > to
>> > > > > > > > > the dist area. Only PMC members can do that.
>> > > > > > > > >
>> > > > > > > > > -----BEGIN PGP PUBLIC KEY BLOCK-----
>> > > > > > > > > Version: GnuPG v1
>> > > > > > > > >
>> > > > > > > > > mQINBEzDDl0BEADHvJW2uff8vfxbfy0IvNOK4aytU+HVEvKEmuSqYEzC8i3BF6RT
>> > > > > > > > > LOxTeRFlu92rYz5ypD0mdNCzQaH0xbkcjialP6FpPCByrM9fFv6hmxZFSY71rvqz
>> > > > > > > > > Aw606I0t9rt94wc6p5Rl8NIso4rbFp2VQeu9hiydtyc5b6xh5mcCb2tYuihfByuL
>> > > > > > > > > ozt0ZWHDk1tZJk/XhSDVZ84jHrWRY2zSa2laIxH+KnJFto8BkTxQgrwEL1ipzoJr
>> > > > > > > > > n3DMIWOtWQR7hdSGWA/V+FgA4I7HXMXVrxolt5FesiWUXkZ7mVjglExv6Mwmf48V
>> > > > > > > > > TFfx46fz8vO6q93XQV705p2Csam78tvAMNYkJs2xZ9iaFIE8ET2cMgPie9yXlqTL
>> > > > > > > > > JGFRoFnTDM4HVW2hU6DsS7OAv0TjxZ94VPElrIrp7sK8MMe9+3qkTQkvUvLmbDOH
>> > > > > > > > > +i0LBw3ULKrod1oNe9VU8wyBBOaB5WqCfdjMWQoNb0IbgTXOyRRfO7YgA+KTtta1
>> > > > > > > > > H91I8x15aW1ofnEjYDvrXmaScCVMJcaas/62XjlKlmwGJMcS69pVRlxdKGLjBDA4
>> > > > > > > > > dg5gnZ+O/L792UwHOjuuqU3ix65xQ1t9Xrw5QsvTEhHLmbaJIrK9cT0UYvtUR/em
>> > > > > > > > > LJ7uVQOjL0PLnFGwntc0B0JldWT11oAtOV1rHgTrRn+HQzC6bTxx6eQlYQARAQAB
>> > > > > > > > > tClCZW5zb24gTWFyZ3VsaWVzIDxiaW1hcmd1bGllc0BhcGFjaGUub3JnPokCNwQT
>> > > > > > > > > AQoAIQUCTMMOXQIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRCcT36dmLHM
>> > > > > > > > > U2/KEACGKZVYVaSarUBdnZGpkgBEcdVxQulcPuAO6cK8omLesMJ365XFsFsWkDQY
>> > > > > > > > > TaOMsmoeuuhZw4IHf5M99BT0hPctdRAlrR5x2amWyOWrYUvutPVUrVFtC9W1tPn4
>> > > > > > > > > VVf50r3hxrwIkNY5Ib7ynyCZL4N/4ExazvsRmKnu6KALvqcmyBZPal1MLaICo1k3
>> > > > > > > > > wVJ8KCE84oja4BPgF4hDMrOh1JKEYtjaowCIJRZEZ29sBbkX1fEDl9c6Z78U37KT
>> > > > > > > > > 3asaPqS13CGsapQ99b9LrBVqXpbmZ+y3SwU+G8TU5RnitRUF9T9+JYD6jHgUM344
>> > > > > > > > > qeAE8TMsd4C2n5cfEaAiwVuQ0u2ulxlw1VjUC3NaycSHcoPOehYdlD3IFE1QmwwA
>> > > > > > > > > XLbLVeCd27RxJ9+kLHsijdHUtwIaqmyC+qBXGof+NikpA+UHA1kgbW8MFgb1QRYN
>> > > > > > > > > DJWFQdIgB6H43pW7KxKT2fULYCUeOvt8nST+4X/YZwclAw5Cets2vtVcLvS5BdGz
>> > > > > > > > > +ANOyppjKH7DzWzYtnamMdS24i50zQu97vtaoijT3f4wW+dMP+mlusQ651+9rCcz
>> > > > > > > > > TXHYkHg9lKw9hy+jdphJPVTMH+QDkcJSsDFpi7k53iLHFcf2YwqK1BiYKoJXd6GH
>> > > > > > > > > FbjybE6c8nNfPywzhSKpM34UNY8EV/14sDonjBLQLnr4Z3NrWLkCDQRMww5dARAA
>> > > > > > > > > 9qZSA8fGWEppVjhJcJ7oFPzSeAEFeU0z/lASN6E6AaV75n63eQgx00s//2s+ty99
>> > > > > > > > > tqp7a5giIhbSaH1EHQ71xBGalXBirWJnCf5/OkYIgoZUWovveNQHGANXjh6qKfwy
>> > > > > > > > > qe9SmWnMn28146LNXKxU/YO+UyYy1AC+0R/Woe5funUmv7db6q/y/+KC9Wbmue+M
>> > > > > > > > > HtAbFqDf07Gvp4rSNeSY97jki6dl9bfS5d/ofcvziBM4KCgalGaxTvYT6UI11i03
>> > > > > > > > > YnW57WjtOstIZuJ1q1f8CC3OzTHRMwzoxLKmkfKXzEBxz9eM3fk3zYA6OTdSTOWl
>> > > > > > > > > 0akvAiPr2CW4pr3MvwHYw9wEAqWJwadQmBDCCLhRlOzqD4WIJA1C3y7vYtxI2OWf
>> > > > > > > > > wiUqtIantAr296vsamuhoiNXAG+GlpYaKasKLr/s7kHcdpH5oD2DkdVUiZHB2xs1
>> > > > > > > > > ZjlgpafG71wHDiNKlJokJ4nZpQOoyDCXEdzr5uOz4fJ5Du4PUgG5y74Cu1JHZ0uJ
>> > > > > > > > > Le65D+MT2TmmiFeQHhT9Txdk2AVgf5uQjHDcIAvMI0niehT+l3zZ4YtRBviRksG4
>> > > > > > > > > 349OecTu+33JoJGqtYnOcuPUR8HBB2dQrPK/l47SUg6esF5duznU4XkNskvbBWu3
>> > > > > > > > > 2aiakTz7XiDm0TEzWtBS/hMRIeH4IyjNux8CwEJfV/MAEQEAAYkCHwQYAQoACQUC
>> > > > > > > > > TMMOXQIbDAAKCRCcT36dmLHMU2u/D/4umQeJcH06a2aM2ETXNVqDK29yti1tCSqs
>> > > > > > > > > 0jsZivZrK+O+oxqvTzcocYtQ2Fb8WjexGpQ41wN5zocH85cCPD+UisziV4r0NQYK
>> > > > > > > > > p1FhAJfkacIR4EtuEQrH2J7m4IDUXSqTW1jv36lXrAO/5ON07Wy3AROoJdFwrtO8
>> > > > > > > > > ja0jX7Z+pe6OaLmptGSFeANSXN6r4CdGYtLh3s5Srf9++WTl+llMLEMfwbAHPSXt
>> > > > > > > > > NV7zoq8j1UwI444W9C4DnVNBiku1e42pQUFt3BtEg22mW/1RdhOHUsisxE3hyUtN
>> > > > > > > > > E2zCpu7Un5aedt5W72WozbAb0LPlUx/0fXyPLFNQmBMHeMVnxZb7CvraBo6BGHL4
>> > > > > > > > > karbJBX2p+5s05/g8t5ljPbfakGNcUZRqbCk1neOQZYOiW8vI1FBbwGWiFWTISHQ
>> > > > > > > > > d+uj/eQTWiQsz4+e3PAVZ4ekDYAMS1HLLXaBwxr7MHRIHRVVKJI8mFbI9HfGKpPt
>> > > > > > > > > HDx+C47QkbQgPu1YL85g5mHkoP621r79zyGjW35HS2l4TCnUZ3q+WLvLMLpIsYcW
>> > > > > > > > > YNBshwOavdSYmk9lCSSCtilTjl1e0E4WOGtusJKpmkAphOkjFKttCE6Z0mSHenLP
>> > > > > > > > > numenORuE0/O7DgoihMrYzTTaRBkHLssIzfaPu96jcWjU9dhuxFW5AktUshr2RLw
>> > > > > > > > > EaWfWeQZ4Q==
>> > > > > > > > > =b8+3
>> > > > > > > > > -----END PGP PUBLIC KEY BLOCK-----
>> > > > > > > > >
>> > > > > > > > > On Tue, Nov 10, 2015 at 6:37 AM, Stuart McCulloch
<
>> > mcculls@gmail.com (mailto:mcculls@gmail.com)
>> > > > > (mailto:mcculls@gmail.com)> wrote:
>> > > > > > > > > > +1 verified with a couple of local projects,
source release
>> > > > > > > > >
>> > > > > > > >
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > >
>> >
>> > looks
>> > > > > good
>> > > > > > > > > >
>> > > > > > > > > > Remember to add your public key to
>> > > > > http://www.apache.org/dist/felix/KEYS:
>> > > > > > > > > >
>> > > > > > > > >
>> > > > > > > >
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > >
>> >
>> > http://felix.apache.org/documentation/development/release-management-nexus.html#appendix-a-create-and-add-your-key-to-httpwwwapacheorgdistfelixkeys
>> > > > > > > > > >
>> > > > > > > > > > --
>> > > > > > > > > > Cheers, Stuart
>> > > > > > > > > >
>> > > > > > > > > >
>> > > > > > > > > > On Monday, 9 November 2015 at 11:44,
Benson Margulies wrote:
>> > > > > > > > > >
>> > > > > > > > > > > Hi,
>> > > > > > > > > > >
>> > > > > > > > > > > We solved 3 issues:
>> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12333631&styleName=Text&projectId=12310100&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7C0a2bd62f03263e903089dc8019574717effb605c%7Clin
>> > > > > > > > > > >
>> > > > > > > > > > > There are still a couple of issues
left in JIRA:
>> > https://issues.apache.org/jira/browse/FELIX-2322?jql=project%20%3D%20FELIX%20AND%20resolution%20%3D%20Unresolved%20AND%20component%20%3D%20%22Maven%20Bundle%20Plugin%22%20ORDER%20BY%20priority%20DESC
>> > > > > > > > > > >
>> > > > > > > > > > > Staging repo:
>> > > > > https://repository.apache.org/content/repositories/orgapachefelix-1104
>> > > > > > > > > > >
>> > > > > > > > > >
>> > > > > > > > >
>> > > > > > > >
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > >
>> >
>> > https://repository.apache.org/service/local/repositories/orgapachefelix-1104/content/org/apache/felix/maven-bundle-plugin/3.0.1/maven-bundle-plugin-3.0.1-source-release.tar.gz
>> > > > > > > > > > >
>> > > > > > > > > > > Source release checksum(s):
>> > > > > > > > > > > [NAME-OF]-source-release.zip
>> > > > > > > > > > >
>> > > > > > > > > >
>> > > > > > > > >
>> > > > > > > >
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > > 08bac4ef6329c776b039a4cd28e7b6f4318aa3a3
>> > > > > > > > > > >
>> > > > > > > > > > > Staging site:
>> > http://felix.apache.org/components/bundle-plugin-archives/bundle-plugin-LATEST/
>> > > > > > > > > > >
>> > > > > > > > > > > Guide to testing staged releases:
>> > > > > http://maven.apache.org/guides/development/guide-testing-releases.html
>> > > > > > > > > > >
>> > > > > > > > > > > Vote open for 72 hours.
>> > > > > > > > > > >
>> > > > > > > > > > > [ ] +1
>> > > > > > > > > > > [ ] +0
>> > > > > > > > > > > [ ] -1
>> > > > > > > > > > >
>> > > > > > > > > >
>> > > > > > > > >
>> > > > > > > >
>> > > > > > >
>> > > > > >
>> > > > >
>> > > > >
>> > > >
>> > >
>> >
>> >
>>
>>
>>
>
>

Mime
View raw message