This is an automated email from the ASF dual-hosted git repository.
freeandnil pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/logging-log4net.git
The following commit(s) were added to refs/heads/master by this push:
new 333c8d56 - added verify-release.sh from @fluffynuts - adjusted review
instructions - move to slik svn
333c8d56 is described below
commit 333c8d56f452504cf1d81ce0127a5c6c2b5da19d
Author: Jan Friedrich <[email protected]>
AuthorDate: Mon May 12 21:09:30 2025 +0200
- added verify-release.sh from @fluffynuts
- adjusted review instructions
- move to slik svn
---
package-lock.json | 4 ++--
scripts/build-release.ps1 | 4 +++-
scripts/verify-release.sh | 19 +++++++++++++++++++
.../antora/modules/ROOT/pages/release-review.adoc | 15 +++++++++++++--
4 files changed, 37 insertions(+), 5 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 6da02dcc..367cfa07 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
{
"name": "log4net",
- "version": "3.1.0",
+ "version": "3.1.1",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "log4net",
- "version": "3.1.0",
+ "version": "3.1.1",
"license": "Apache-2.0",
"devDependencies": {
"@antora/cli": "^3.2.0-alpha.4",
diff --git a/scripts/build-release.ps1 b/scripts/build-release.ps1
index 090d6e17..95650079 100644
--- a/scripts/build-release.ps1
+++ b/scripts/build-release.ps1
@@ -10,7 +10,7 @@ pushd $PSScriptRoot/..
git archive --format=zip --output
$PSScriptRoot/../build/artifacts/apache-log4net-source-$Version.zip master
popd
'compressing binaries ...'
-cp $PSScriptRoot/verify-release.ps1 $PSScriptRoot/../build/artifacts/
+cp $PSScriptRoot/verify-release.* $PSScriptRoot/../build/artifacts/
cp $PSScriptRoot/../LICENSE $PSScriptRoot/../build/Release/
cp $PSScriptRoot/../NOTICE $PSScriptRoot/../build/Release/
pushd $PSScriptRoot/../build/Release
@@ -27,6 +27,8 @@ gpg --armor --output
./apache-log4net-binaries-$Version.zip.asc --detach-sig ./a
sha512sum -b ./apache-log4net-binaries-$Version.zip >
./apache-log4net-binaries-$Version.zip.sha512
gpg --armor --output ./verify-release.ps1.asc --detach-sig ./verify-release.ps1
sha512sum -b ./verify-release.ps1 > ./verify-release.ps1.sha512
+gpg --armor --output ./verify-release.ps1.asc --detach-sig ./verify-release.sh
+sha512sum -b ./verify-release.ps1 > ./verify-release.sh.sha512
popd
'cleaning site ...'
rm -rf $PSScriptRoot/../target/*
diff --git a/scripts/verify-release.sh b/scripts/verify-release.sh
new file mode 100644
index 00000000..da6720a1
--- /dev/null
+++ b/scripts/verify-release.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+set -e
+
+TARGET_DIR="$1";
+if test -z "$TARGET_DIR"; then
+ TARGET_DIR="$(pwd)"
+fi
+
+sha512sum --check *.sha512
+
+wget https://downloads.apache.org/logging/KEYS
+gpg --import -q KEYS
+for f in $(find "$TARGET_DIR" -iname '*.asc'); do
+ gpg --verify "$f"
+done
+
+mkdir -p src
+cd src
+unzip -q -o ../*source*.zip
diff --git a/src/site/antora/modules/ROOT/pages/release-review.adoc
b/src/site/antora/modules/ROOT/pages/release-review.adoc
index 88bd65fd..dfc03bf4 100644
--- a/src/site/antora/modules/ROOT/pages/release-review.adoc
+++ b/src/site/antora/modules/ROOT/pages/release-review.adoc
@@ -27,7 +27,7 @@ Releases of log4net can be verified with following steps:
[source,powershell]
----
winget install -e --id GnuPG.Gpg4win
-winget install -e --id TortoiseSVN.TortoiseSVN # or any other subversion
client
+winget install -e --id Slik.Subversion # or any other subversion client
winget install -e --id Mono.Mono
winget install -e --id Microsoft.DotNet.SDK.8
----
@@ -39,7 +39,7 @@ After installation, verify that gpg and svn are in the path
and add them when no
----
Set-ExecutionPolicy Bypass -Scope Process -Force;
[System.Net.ServicePointManager]::SecurityProtocol =
[System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object
System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))
choco install gpg4win
-choco install tortoisesvn # or any other subversion client
+choco install sliksvn # or any other subversion client
choco install mono
choco install dotnet-8.0-sdk
----
@@ -94,6 +94,16 @@ wget --cut-dirs=6 \
----
====
+. Verify and extract
++
+[source,bash]
+----
+& ./verify-release.sh
+----
++
+[%collapsible]
+.Click to see how todo these steps manually
+====
. Verify checksums:
+
[source,bash]
@@ -123,6 +133,7 @@ umask 0022
unzip -q *source*.zip -d src
cd src
----
+====
. Verify the build (install https://docs.docker.com/engine/install[docker], if
you haven't already):
+
