myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mike Kienenberger <mkien...@gmail.com>
Subject Re: [VOTE] Release of MyFaces Core 2.2.9
Date Thu, 26 Nov 2015 16:53:48 GMT
- signatures and checksums match
- source builds
- apache rat passes

+1






Below are the linux commands I used to verify the release of the
myfaces-core-assembly-2.2.9-src files:

=============================================

wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.tar.gz
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.tar.gz.asc
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.tar.gz.md5
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.tar.gz.sha1

wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.zip
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.zip.asc
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.zip.md5
wget https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/core/myfaces-core-assembly/2.2.9/myfaces-core-assembly-2.2.9-src.zip.sha1


# check checksums
find . -name '*.md5' -exec cat {} \; -printf '  %f\n' | sed
's|\.md5$||' | md5sum -c
find . -name '*.sha1' -exec cat {} \; -printf '  %f\n' | sed
's|\.sha1$||' | sha1sum -c

# check signatures
wget http://www.apache.org/dist/myfaces/KEYS
gpg --import KEYS
find . -name '*.asc' -exec gpg --verify {} \;

# verify tar.gz and zip sources are identical
mkdir src
cd src
tar xvf ../myfaces-core-assembly-2.2.9-src.tar.gz
mv myfaces-core-2.2.9-src/ myfaces-core-2.2.9-src-tar-gz
unzip ../myfaces-core-assembly-2.2.9-src.zip
# should be no output
diff -rq myfaces-core-2.2.9-src*
# should be "are identical" output
diff -srq myfaces-core-2.2.9-src*

# build source
cd myfaces-core-2.2.9-src/src
find \( -name '*.jar' -o -name '*.zip' \) -exec unzip -n {} \;
cd myfaces-core-module-2.2.9/
mvn install

mvn apache-rat:check
# To check for all errors, if more than one project is affected
#   mvn apache-rat:check -Drat.numUnapprovedLicenses=9999
# To see details of rat failure, including location of rat report
#   mvn -e -X apache-rat:check


On Thu, Nov 26, 2015 at 1:35 AM, Dennis Kieselhorst <mail@dekies.de> wrote:
> +1
>
>
> Am 24.11.2015 um 04:16 schrieb Leonardo Uribe:
>
> Hi,
>
> I was running the needed tasks to get the 2.2.9 release of Apache
> MyFaces core out.
>
> The artifacts passed the TCK test of Feb 2013 (jsftck-2.2_26-Feb-2013.zip).
>
> Please note that this vote concerns all of the following parts:
>  1. Maven artifact group "org.apache.myfaces.shared" v4.2.7  [1]
>  2. Maven artifact group "org.apache.myfaces.core" v2.2.9  [1]
>
> The artifacts were deployed on nexus repo [1] and to my private
> Apache account [3] for binary and source packages.
>
> The release notes could be found at [4].
>
> Also the clirr test does not show binary incompatibilities with myfaces-api.
>
> Please take a look at the "2.2.9" artifacts and vote!
>
> Please note: This vote is "majority approval" with a minimum of three
> +1 votes (see [3]).
>
> ------------------------------------------------
> [ ] +1 for community members who have reviewed the bits
> [ ] +0
> [ ] -1 for fatal flaws that should cause these bits not to be released,
>  and why..............
> ------------------------------------------------
>
> Thanks,
> Leonardo Uribe
>
> [1]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1057/org/apache/myfaces/
> [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
> [3] http://people.apache.org/~lu4242/myfaces229binsrc
> [4]
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&version=12331973
>
>

Mime
View raw message