Mailing-List: contact dev-help@myfaces.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "MyFaces Development" <dev@myfaces.apache.org>
Received-SPF: pass (athena.apache.org: domain of mkienenb@gmail.com designates
 209.85.217.181 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <550CA399.1020907@schnurpfeil.de>
References: 
 <CAM1yOjb_+LdWs=cMGrsu+jzz08ehpsGd97=b9_K0-vU9ScjsWA@mail.gmail.com>
 <CAM1yOjaozqFA3+WAP+rKQQ_XoUSLmoy19Y_1kHyJopxy=wbpTQ@mail.gmail.com>
 <5509FFBF.4050101@schnurpfeil.de>
 <CAM1yOjaZ-yYRnFq=QMo54COrAtH29362JnSz7HCSijPWKhu2UQ@mail.gmail.com>
 <CAM1yOjapQeSATF+bWS_J=XC77BeN5M5YszuZpzkr+NvdSq-Pjg@mail.gmail.com>
 <550CA399.1020907@schnurpfeil.de>
From: Mike Kienenberger <mkienenb@gmail.com>
Date: Fri, 20 Mar 2015 19:09:27 -0400
Message-ID: 
 <CAM1yOjbHyu0V8Sn+ifVs6mjr6awA=oGGUpjed83ZHhCXbBrE=g@mail.gmail.com>
Subject: Re: Tobago 2.0.7 release artifacts
To: MyFaces Development <dev@myfaces.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Mar 20, 2015 at 6:47 PM, Udo Schnurpfeil <udo@schnurpfeil.de> wrote:
> It seems to be very usual, to have these file. Other apache projects
> also have these files.
>
>> Does anyone know why?

Really?  I haven't seen them for the other Myfaces releases nor have I
seen them on Cayenne.
Unfortunately, the only thing I know in Maven is "mvn install" and how
to exclude files in rat, so I can't help :)

> I think the *.asc is also a file that will not be distributed over the
> mirrors...

Right.  *.asc and *.md5 and *.sha1 are only available directly from
the ASF.  Otherwise the mirror sites could tamper with the releases by
creating their own asc/md5/sha1 files after modifying the release.

I finished evaluating the main release yesterday and everything is
fine by me.   But I still need to download, build, and evaluate the
examples release.   I'll try to get to that either tonight or Saturday
morning (tomorrow for me).

> Am 19.03.15 um 18:13 schrieb Mike Kienenberger:
>> This is also not a release-blocker but DEPENDENCIES needs to be added
>> to the exclusion list or apache rat will fail.
>> I'll open an issue on this.
>>
>> --- tobago-2.0.7/pom.xml    2015-03-18 01:20:28.000000000 -0400
>> +++ tobago-2.0.7-modified/pom.xml    2015-03-19 13:06:10.725792204 -0400
>> @@ -972,6 +972,9 @@
>>            <version>0.9</version>
>>            <configuration>
>>              <excludes>
>> +              <!-- This file is created during a release and needs no
>> licensing text -->
>> +              <exclude>DEPENDENCIES</exclude>
>> +
>>                <!-- jQuery -->
>>                <exclude>**/jquery*.js</exclude>
>>                <exclude>**/jquery*.map</exclude>
>>
>>
>>
>> On Wed, Mar 18, 2015 at 9:49 PM, Mike Kienenberger <mkienenb@gmail.com> wrote:
>>> Yes, I meant 2.0.7, not 2.0.6 (copy and paste error).
>>>
>>> Ok.  I see the tobago-assembly-2.0.7-dist.tar.gz  and
>>> tobago-assembly-2.0.7-dist.zip files now.   Thanks!
>>>
>>> I'll download those, do the appropriate checks, and compare them to
>>> what the source built.
>>>
>>> It may take me until Saturday, but I'm hoping to have it for you tomorrow.
>>>
>>> I'm just going to check the release requirements (builds from source,
>>> signatures match, checksums match, source build matches distribution,
>>> apache rat passes) rather than trying to evaluate the technical merits
>>> of this Tobago Release.  I'll leave the code evaluation to you guys :)
>>>
>>>
>>> On Wed, Mar 18, 2015 at 6:44 PM, Udo Schnurpfeil <udo@schnurpfeil.de> wrote:
>>>> Hi Mike,
>>>>
>>>> thank you for your participation. I do my annotations inline
>>>>
>>>>
>>>> Am 18.03.15 um 21:09 schrieb Mike Kienenberger:
>>>>> Just as an update, I was able to build
>>>>> myfaces-tobago-2.0.6-source-release.zip easily.
>>>>
>>>> Great!
>>>>
>>>> Did you mean 2.0.6 or 2.0.7?
>>>>
>>>>>
>>>>> On Wed, Mar 18, 2015 at 12:45 PM, Mike Kienenberger <mkienenb@gmail.com> wrote:
>>>>>> So I thought I'd help out with the vote for the Tobago release, which
>>>>>> I haven't done before.
>>>>>>
>>>>>> But I'm confused by the immensity of the release artifacts at
>>>>>> https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/.
>>>>
>>>> The dist is in subfolder "tobago-assembly"
>>>>
>>>> By the way:
>>>> For people who have a running application using Tobago and Maven, they
>>>> can add the stating repo, and only have to change the version number to
>>>> test their application.
>>>>
>>>>>>
>>>>>> What exactly is being released?  Which file corresponds to what is
>>>>>> going to become myfaces-tobago-2.0.7-dist.tar.gz?  I see nothing with
>>>>>> this name in the most obvious directories, but I haven't checked all
>>>>>> 27!!! folders in the staging repository:.
>>>>>>
>>>>>> Along with that, what file is the source file to build
>>>>>> myfaces-tobago-2.0.7-dist.tar.gz?   Is it
>>>>>> https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip?
>>>>>>
>>>>>>  all I have to do is unpack it and run "mvn install" on it, right?
>>>>>>
>>>>>> There also seems to be some unnecessary build artifacts.   Not a
>>>>>> show-shopper for release, but it should be cleaned up.
>>>>>>
>>>>>> tobago-2.0.7-source-release.zip.asc.asc
>>>>>> tobago-2.0.7-source-release.zip.asc.asc.md5
>>>>>> tobago-2.0.7-source-release.zip.asc.asc.sha1
>>>>>> tobago-2.0.7-source-release.zip.asc.md5
>>>>>> tobago-2.0.7-source-release.zip.asc.sha1
>>>>>>
>>>>
>>>> Yes of course, I'll try to fix that in the next release. But not
>>>> problem: the script to copy the release files to the release server will
>>>> filter the files.
>>>>
>>>>>>
>>>>>> Altogether, I would expect to find the following items based on the
>>>>>> 2.0.6 release:
>>>>>>
>>>>>> myfaces-tobago-2.0.6-dist.tar.gz
>>>>>> myfaces-tobago-2.0.6-dist.tar.gz.md5
>>>>>> myfaces-tobago-2.0.6-dist.tar.gz.asc
>>>>>>
>>>>>> myfaces-tobago-2.0.6-dist.zip
>>>>>> myfaces-tobago-2.0.6-dist.zip.md5
>>>>>> myfaces-tobago-2.0.6-dist.zip.asc
>>>>>>
>>>>>> myfaces-tobago-2.0.6-source-release.zip
>>>>>> myfaces-tobago-2.0.6-source-release.zip.md5
>>>>>> myfaces-tobago-2.0.6-source-release.zip.asc
>>>>>>
>>>>>> myfaces-tobago-2.0.6-example.tar.gz
>>>>>> myfaces-tobago-2.0.6-example.tar.gz.md5
>>>>>> myfaces-tobago-2.0.6-example.tar.gz.asc
>>>>>>
>>>>>> myfaces-tobago-2.0.6-example.zip
>>>>>> myfaces-tobago-2.0.6-example.zip.md5
>>>>>> myfaces-tobago-2.0.6-example.zip.asc
>>>>>>
>>>>>> And I would expect myfaces-tobago-2.0.6-example.zip to produce all of
>>>>>> the example artifacts and myfaces-tobago-2.0.6-source-release.zip to
>>>>>> produce all of the other artifacts.
>>>>
>>>> The example.zip only contains the most important examples.
>>>>>>
>>>>>> Thanks,
>>>>>> -Mike
>>>>
>>>> Regards,
>>>>
>>>> Udo