pjfanning commented on PR #178:
URL: 
https://github.com/apache/incubator-resilientdb/pull/178#issuecomment-3015202486

   > > @cjcchen could you update the NOTICE on all of your git repos? You'll 
find them listed in https://incubator.apache.org/clutch/resilientdb.html
   > 
   > Hi PJ, Yes. I have updated all.
   > 
   > Thanks a lot.
   
   @cjcchen I have checked some git repos and they were not updated. I assume 
that you are hand modifying the files as part of creating the release. This is 
problematic.
   * The files might not be correct for future RCs as the release manager might 
forget to hand modify them
   * If the release manager is hand modifying the files in the source release, 
what is to say that they are not modifying other files
   * most RCs contain commit IDs and possibly git tags so that people verifying 
the releases can verify that the release manager is not hand modifying files - 
it really breaks the circle of trust - and it is important build is 
reproducible - that someone else could build the release and you would get the 
same artifacts


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to