felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Bosschaert <david.bosscha...@gmail.com>
Subject Re: [RESULT] [VOTE] Release Apache Maven Bundle Plugin version 3.0.1
Date Fri, 13 Nov 2015 12:31:51 GMT
Really? I think the downloads http://felix.apache.org/downloads.cgi
points to the dist area so for that it also has to contain the
binaries?

David

On 13 November 2015 at 12:07, Benson Margulies <bimargulies@gmail.com> wrote:
> The only things in the dist area should be the source release zip,
> it's detached signature file, and its md5 and sha1 files.
>
> On Fri, Nov 13, 2015 at 6:35 AM, Stuart McCulloch <mcculls@gmail.com> wrote:
>> Those files are extraneous artifacts from old Maven releases (where everything got
a checksum, even signature files) - this was fixed in https://issues.apache.org/jira/browse/MNG-5504
>>
>> They aren’t exposed from the site download page, and don’t provide any extra
security over the existing checksums/signatures of the primary files - so can be cleaned up
for consistency
>>
>> On Friday, 13 November 2015 at 11:19, Pierre De Rop wrote:
>>
>>> I will try to do it, but before I have a question:
>>>
>>> it seems that there is a diff between the files currently committed in the
>>> Felix release repository and this new release candidate: Indeed, in the
>>> release repository, we currently have the following signatures files that
>>> are not present in this new release candidate:
>>>
>>> from https://dist.apache.org/repos/dist/release/felix/:
>>>
>>> maven-bundle-plugin-3.0.0.jar.asc.md5
>>> maven-bundle-plugin-3.0.0.jar.asc.sha1
>>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.md5
>>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.sha1
>>> maven-bundle-plugin-3.0.0.pom.asc.md5
>>> maven-bundle-plugin-3.0.0.pom.asc.sha1
>>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.md5
>>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.sha1
>>> maven-bundle-plugin-3.0.0-source-release.zip.asc.md5
>>> maven-bundle-plugin-3.0.0-source-release.zip.asc.sha1
>>> maven-bundle-plugin-3.0.0-sources.jar.asc.md5
>>> maven-bundle-plugin-3.0.0-sources.jar.asc.sha1
>>>
>>> I guess that in the previous release (currently in the felix release repo),
>>> the above files were not necessary.
>>> I just would like that someone confirms this ?
>>>
>>> thanks;
>>>
>>> -> Pierre
>>>
>>>
>>>
>>> On Wed, Nov 11, 2015 at 7:41 PM, Benson Margulies <bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
>>> wrote:
>>>
>>> > I'll send the announcement when I get word that someone has committed
>>> > the release package to the dist area.
>>> >
>>> >
>>> > On Wed, Nov 11, 2015 at 1:22 PM, Benson Margulies <bimargulies@gmail.com
(mailto:bimargulies@gmail.com)>
>>> > wrote:
>>> > > Hi, the vote has passed with the following result:
>>> > >
>>> > > +1 (binding):
>>> > >
>>> > > Pierre De Rop
>>> > > David Bosschaert
>>> > > Stuart McCulloch
>>> > >
>>> > > +1 (not binding):
>>> > >
>>> > > Stefan Seifart, Jean-Baptiste Onofré, Jamie Goodyear.
>>> > >
>>> > > I will promote. PMC members, one of you has to put the source into
the
>>> > > distro area, I cannot.
>>> > >
>>> > >
>>> > >
>>> > > On Wed, Nov 11, 2015 at 1:14 PM, Pierre De Rop <pierre.derop@gmail.com
(mailto:pierre.derop@gmail.com)>
>>> > wrote:
>>> > > > Hello Benson,
>>> > > >
>>> > > > I was about to vote: +1
>>> > > >
>>> > > > regards;
>>> > > > /Pierre
>>> > > >
>>> > > > On Wed, Nov 11, 2015 at 7:12 PM, Benson Margulies <
>>> > bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
>>> > > > wrote:
>>> > > >
>>> > > > > We are still one PMC vote short here.
>>> > > > >
>>> > > > > On Tue, Nov 10, 2015 at 7:13 PM, Jamie G. <jamie.goodyear@gmail.com
(mailto:jamie.goodyear@gmail.com)>
>>> > > > > wrote:
>>> > > > > > +1 (non-binding)
>>> > > > > >
>>> > > > > > On Tue, Nov 10, 2015 at 11:50 AM, Benson Margulies
>>> > > > > > <bimargulies@gmail.com (mailto:bimargulies@gmail.com)>
wrote:
>>> > > > > > > Thank You. Perhaps I will change that doc page
to mention that a PMC
>>> > > > > > > member might be required.
>>> > > > > > >
>>> > > > > > > On Tue, Nov 10, 2015 at 7:30 AM, Stuart McCulloch
<
>>> > mcculls@gmail.com (mailto:mcculls@gmail.com)>
>>> > > > > wrote:
>>> > > > > > > > No worries, I’ve just added your key and
confirmed it matches the
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> > one
>>> > > > > used to sign the artifacts
>>> > > > > > > >
>>> > > > > > > > On Tuesday, 10 November 2015 at 12:15, Benson
Margulies wrote:
>>> > > > > > > >
>>> > > > > > > > > No can do with the signature. As a mere
committer, I can't commit
>>> > to
>>> > > > > > > > > the dist area. Only PMC members can do
that.
>>> > > > > > > > >
>>> > > > > > > > > -----BEGIN PGP PUBLIC KEY BLOCK-----
>>> > > > > > > > > Version: GnuPG v1
>>> > > > > > > > >
>>> > > > > > > > > mQINBEzDDl0BEADHvJW2uff8vfxbfy0IvNOK4aytU+HVEvKEmuSqYEzC8i3BF6RT
>>> > > > > > > > > LOxTeRFlu92rYz5ypD0mdNCzQaH0xbkcjialP6FpPCByrM9fFv6hmxZFSY71rvqz
>>> > > > > > > > > Aw606I0t9rt94wc6p5Rl8NIso4rbFp2VQeu9hiydtyc5b6xh5mcCb2tYuihfByuL
>>> > > > > > > > > ozt0ZWHDk1tZJk/XhSDVZ84jHrWRY2zSa2laIxH+KnJFto8BkTxQgrwEL1ipzoJr
>>> > > > > > > > > n3DMIWOtWQR7hdSGWA/V+FgA4I7HXMXVrxolt5FesiWUXkZ7mVjglExv6Mwmf48V
>>> > > > > > > > > TFfx46fz8vO6q93XQV705p2Csam78tvAMNYkJs2xZ9iaFIE8ET2cMgPie9yXlqTL
>>> > > > > > > > > JGFRoFnTDM4HVW2hU6DsS7OAv0TjxZ94VPElrIrp7sK8MMe9+3qkTQkvUvLmbDOH
>>> > > > > > > > > +i0LBw3ULKrod1oNe9VU8wyBBOaB5WqCfdjMWQoNb0IbgTXOyRRfO7YgA+KTtta1
>>> > > > > > > > > H91I8x15aW1ofnEjYDvrXmaScCVMJcaas/62XjlKlmwGJMcS69pVRlxdKGLjBDA4
>>> > > > > > > > > dg5gnZ+O/L792UwHOjuuqU3ix65xQ1t9Xrw5QsvTEhHLmbaJIrK9cT0UYvtUR/em
>>> > > > > > > > > LJ7uVQOjL0PLnFGwntc0B0JldWT11oAtOV1rHgTrRn+HQzC6bTxx6eQlYQARAQAB
>>> > > > > > > > > tClCZW5zb24gTWFyZ3VsaWVzIDxiaW1hcmd1bGllc0BhcGFjaGUub3JnPokCNwQT
>>> > > > > > > > > AQoAIQUCTMMOXQIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRCcT36dmLHM
>>> > > > > > > > > U2/KEACGKZVYVaSarUBdnZGpkgBEcdVxQulcPuAO6cK8omLesMJ365XFsFsWkDQY
>>> > > > > > > > > TaOMsmoeuuhZw4IHf5M99BT0hPctdRAlrR5x2amWyOWrYUvutPVUrVFtC9W1tPn4
>>> > > > > > > > > VVf50r3hxrwIkNY5Ib7ynyCZL4N/4ExazvsRmKnu6KALvqcmyBZPal1MLaICo1k3
>>> > > > > > > > > wVJ8KCE84oja4BPgF4hDMrOh1JKEYtjaowCIJRZEZ29sBbkX1fEDl9c6Z78U37KT
>>> > > > > > > > > 3asaPqS13CGsapQ99b9LrBVqXpbmZ+y3SwU+G8TU5RnitRUF9T9+JYD6jHgUM344
>>> > > > > > > > > qeAE8TMsd4C2n5cfEaAiwVuQ0u2ulxlw1VjUC3NaycSHcoPOehYdlD3IFE1QmwwA
>>> > > > > > > > > XLbLVeCd27RxJ9+kLHsijdHUtwIaqmyC+qBXGof+NikpA+UHA1kgbW8MFgb1QRYN
>>> > > > > > > > > DJWFQdIgB6H43pW7KxKT2fULYCUeOvt8nST+4X/YZwclAw5Cets2vtVcLvS5BdGz
>>> > > > > > > > > +ANOyppjKH7DzWzYtnamMdS24i50zQu97vtaoijT3f4wW+dMP+mlusQ651+9rCcz
>>> > > > > > > > > TXHYkHg9lKw9hy+jdphJPVTMH+QDkcJSsDFpi7k53iLHFcf2YwqK1BiYKoJXd6GH
>>> > > > > > > > > FbjybE6c8nNfPywzhSKpM34UNY8EV/14sDonjBLQLnr4Z3NrWLkCDQRMww5dARAA
>>> > > > > > > > > 9qZSA8fGWEppVjhJcJ7oFPzSeAEFeU0z/lASN6E6AaV75n63eQgx00s//2s+ty99
>>> > > > > > > > > tqp7a5giIhbSaH1EHQ71xBGalXBirWJnCf5/OkYIgoZUWovveNQHGANXjh6qKfwy
>>> > > > > > > > > qe9SmWnMn28146LNXKxU/YO+UyYy1AC+0R/Woe5funUmv7db6q/y/+KC9Wbmue+M
>>> > > > > > > > > HtAbFqDf07Gvp4rSNeSY97jki6dl9bfS5d/ofcvziBM4KCgalGaxTvYT6UI11i03
>>> > > > > > > > > YnW57WjtOstIZuJ1q1f8CC3OzTHRMwzoxLKmkfKXzEBxz9eM3fk3zYA6OTdSTOWl
>>> > > > > > > > > 0akvAiPr2CW4pr3MvwHYw9wEAqWJwadQmBDCCLhRlOzqD4WIJA1C3y7vYtxI2OWf
>>> > > > > > > > > wiUqtIantAr296vsamuhoiNXAG+GlpYaKasKLr/s7kHcdpH5oD2DkdVUiZHB2xs1
>>> > > > > > > > > ZjlgpafG71wHDiNKlJokJ4nZpQOoyDCXEdzr5uOz4fJ5Du4PUgG5y74Cu1JHZ0uJ
>>> > > > > > > > > Le65D+MT2TmmiFeQHhT9Txdk2AVgf5uQjHDcIAvMI0niehT+l3zZ4YtRBviRksG4
>>> > > > > > > > > 349OecTu+33JoJGqtYnOcuPUR8HBB2dQrPK/l47SUg6esF5duznU4XkNskvbBWu3
>>> > > > > > > > > 2aiakTz7XiDm0TEzWtBS/hMRIeH4IyjNux8CwEJfV/MAEQEAAYkCHwQYAQoACQUC
>>> > > > > > > > > TMMOXQIbDAAKCRCcT36dmLHMU2u/D/4umQeJcH06a2aM2ETXNVqDK29yti1tCSqs
>>> > > > > > > > > 0jsZivZrK+O+oxqvTzcocYtQ2Fb8WjexGpQ41wN5zocH85cCPD+UisziV4r0NQYK
>>> > > > > > > > > p1FhAJfkacIR4EtuEQrH2J7m4IDUXSqTW1jv36lXrAO/5ON07Wy3AROoJdFwrtO8
>>> > > > > > > > > ja0jX7Z+pe6OaLmptGSFeANSXN6r4CdGYtLh3s5Srf9++WTl+llMLEMfwbAHPSXt
>>> > > > > > > > > NV7zoq8j1UwI444W9C4DnVNBiku1e42pQUFt3BtEg22mW/1RdhOHUsisxE3hyUtN
>>> > > > > > > > > E2zCpu7Un5aedt5W72WozbAb0LPlUx/0fXyPLFNQmBMHeMVnxZb7CvraBo6BGHL4
>>> > > > > > > > > karbJBX2p+5s05/g8t5ljPbfakGNcUZRqbCk1neOQZYOiW8vI1FBbwGWiFWTISHQ
>>> > > > > > > > > d+uj/eQTWiQsz4+e3PAVZ4ekDYAMS1HLLXaBwxr7MHRIHRVVKJI8mFbI9HfGKpPt
>>> > > > > > > > > HDx+C47QkbQgPu1YL85g5mHkoP621r79zyGjW35HS2l4TCnUZ3q+WLvLMLpIsYcW
>>> > > > > > > > > YNBshwOavdSYmk9lCSSCtilTjl1e0E4WOGtusJKpmkAphOkjFKttCE6Z0mSHenLP
>>> > > > > > > > > numenORuE0/O7DgoihMrYzTTaRBkHLssIzfaPu96jcWjU9dhuxFW5AktUshr2RLw
>>> > > > > > > > > EaWfWeQZ4Q==
>>> > > > > > > > > =b8+3
>>> > > > > > > > > -----END PGP PUBLIC KEY BLOCK-----
>>> > > > > > > > >
>>> > > > > > > > > On Tue, Nov 10, 2015 at 6:37 AM, Stuart
McCulloch <
>>> > mcculls@gmail.com (mailto:mcculls@gmail.com)
>>> > > > > (mailto:mcculls@gmail.com)> wrote:
>>> > > > > > > > > > +1 verified with a couple of local
projects, source release
>>> > > > > > > > >
>>> > > > > > > >
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> > looks
>>> > > > > good
>>> > > > > > > > > >
>>> > > > > > > > > > Remember to add your public key
to
>>> > > > > http://www.apache.org/dist/felix/KEYS:
>>> > > > > > > > > >
>>> > > > > > > > >
>>> > > > > > > >
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> > http://felix.apache.org/documentation/development/release-management-nexus.html#appendix-a-create-and-add-your-key-to-httpwwwapacheorgdistfelixkeys
>>> > > > > > > > > >
>>> > > > > > > > > > --
>>> > > > > > > > > > Cheers, Stuart
>>> > > > > > > > > >
>>> > > > > > > > > >
>>> > > > > > > > > > On Monday, 9 November 2015 at 11:44,
Benson Margulies wrote:
>>> > > > > > > > > >
>>> > > > > > > > > > > Hi,
>>> > > > > > > > > > >
>>> > > > > > > > > > > We solved 3 issues:
>>> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12333631&styleName=Text&projectId=12310100&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7C0a2bd62f03263e903089dc8019574717effb605c%7Clin
>>> > > > > > > > > > >
>>> > > > > > > > > > > There are still a couple of
issues left in JIRA:
>>> > https://issues.apache.org/jira/browse/FELIX-2322?jql=project%20%3D%20FELIX%20AND%20resolution%20%3D%20Unresolved%20AND%20component%20%3D%20%22Maven%20Bundle%20Plugin%22%20ORDER%20BY%20priority%20DESC
>>> > > > > > > > > > >
>>> > > > > > > > > > > Staging repo:
>>> > > > > https://repository.apache.org/content/repositories/orgapachefelix-1104
>>> > > > > > > > > > >
>>> > > > > > > > > >
>>> > > > > > > > >
>>> > > > > > > >
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> > https://repository.apache.org/service/local/repositories/orgapachefelix-1104/content/org/apache/felix/maven-bundle-plugin/3.0.1/maven-bundle-plugin-3.0.1-source-release.tar.gz
>>> > > > > > > > > > >
>>> > > > > > > > > > > Source release checksum(s):
>>> > > > > > > > > > > [NAME-OF]-source-release.zip
>>> > > > > > > > > > >
>>> > > > > > > > > >
>>> > > > > > > > >
>>> > > > > > > >
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > > 08bac4ef6329c776b039a4cd28e7b6f4318aa3a3
>>> > > > > > > > > > >
>>> > > > > > > > > > > Staging site:
>>> > http://felix.apache.org/components/bundle-plugin-archives/bundle-plugin-LATEST/
>>> > > > > > > > > > >
>>> > > > > > > > > > > Guide to testing staged releases:
>>> > > > > http://maven.apache.org/guides/development/guide-testing-releases.html
>>> > > > > > > > > > >
>>> > > > > > > > > > > Vote open for 72 hours.
>>> > > > > > > > > > >
>>> > > > > > > > > > > [ ] +1
>>> > > > > > > > > > > [ ] +0
>>> > > > > > > > > > > [ ] -1
>>> > > > > > > > > > >
>>> > > > > > > > > >
>>> > > > > > > > >
>>> > > > > > > >
>>> > > > > > >
>>> > > > > >
>>> > > > >
>>> > > > >
>>> > > >
>>> > >
>>> >
>>> >
>>>
>>>
>>>
>>
>>

Mime
View raw message