As members of the PMC, we're required to verify all releases we approve of meet ASF licensing policy[1], so I don't consider the issues "minor".
Mistakenly violating policy in the past is a different kind of problem than moving forward to knowingly violate it. In particular, not all of the bundled works have copyrights that are covered under a donation to the Foundation. If we distribute e.g. the accumulo-core binary jar in its current state the foundation will be committing willful copyright infringement. The binary tarball (and I'd imagine the rpm/deb files) have similar problems because we'd be violating the terms of the included works' respective licenses. [1]: http://www.apache.org/dev/release.html#what-must-every-release-contain On Thu, Sep 10, 2015 at 11:51 AM, Billie Rinaldi <billie.rina...@gmail.com> wrote: > Agreed. > > On Thu, Sep 10, 2015 at 9:47 AM, Christopher <ctubb...@apache.org> wrote: > > > I think the license issues are relatively small compared to the bugfixes, > > especially since we're really trying to close out 1.5.x development. So, > > given the options, I'd prefer to pass RC1, and make the license fixes in > > 1.6.x and later, as applicable. > > > > On Thu, Sep 10, 2015 at 12:28 PM Josh Elser <els...@apache.org> wrote: > > > > > Thanks again for taking the time to inspect things so thoroughly, Sean. > > > > > > Others who have already voted, I'd ask for your opinion on whether we > > > should sink this release (instead of me blindly going by majority > rule). > > > > > > Personally, I'm presently of the opinion that, given the severity of > the > > > bug(s) fixed in this release already, RC1 should pass. Considering that > > > we've been making releases like this for quite some time w/o issue and > > > 1.5 is all but dead, let's push this release out, (again) table 1.5 and > > > then make these improvements to 1.6 before we cut an RC there there > when > > > we have time to thoroughly vet the changes (instead of the 11th hour of > > > a vote). > > > > > > If there's a need for lengthy discussion, let's break this off the VOTE > > > thread (I leave this message here for visibility). > > > > > > - Josh > > > > > > Sean Busbey wrote: > > > > -1 > > > > > > > > * signatures check out > > > > * checksums match > > > > * licensing errors noted in ACCUMULO-3988 > > > > > > > > On Sat, Sep 5, 2015 at 4:27 PM, Josh Elser<els...@apache.org> > wrote: > > > > > > > >> Accumulo Developers, > > > >> > > > >> Please consider the following candidate for Accumulo 1.5.4. > > > >> > > > >> Git Commit: > > > >> 12a1041dcbb7f3b10543c305f27ece4b0d65ab9c > > > >> Branch: > > > >> 1.5.4-rc1 > > > >> > > > >> If this vote passes, a gpg-signed tag will be created using: > > > >> git tag -f -m 'Apache Accumulo 1.5.4' -s 1.5.4 > > > >> 12a1041dcbb7f3b10543c305f27ece4b0d65ab9c > > > >> > > > >> Staging repo: > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039 > > > >> Source (official release artifact): > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-src.tar.gz > > > >> Binary: > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-bin.tar.gz > > > >> (Append ".sha1", ".md5", or ".asc" to download the signature/hash > for > > a > > > >> given artifact.) > > > >> > > > >> All artifacts were built and staged with: > > > >> mvn release:prepare&& mvn release:perform > > > >> > > > >> Signing keys are available at > > https://www.apache.org/dist/accumulo/KEYS > > > >> (Expected fingerprint: ABC8914C675FAD3FA74F39B2D146D62CAB471AE9) > > > >> > > > >> Release notes (in progress) can be found at > > > >> https://accumulo.apache.org/release_notes/1.5.4 > > > >> > > > >> Please vote one of: > > > >> [ ] +1 - I have verified and accept... > > > >> [ ] +0 - I have reservations, but not strong enough to vote > against... > > > >> [ ] -1 - Because..., I do not accept... > > > >> ... these artifacts as the 1.5.4 release of Apache Accumulo. > > > >> > > > >> This vote will end on Thurs Sep 10 23:00:00 UTC 2015 > > > >> (Thurs Sep 10 20:00:00 EDT 2015 / Thurs Sep 10 17:00:00 PDT 2015) > > > >> > > > >> Thanks! > > > >> > > > >> P.S. Hint: download the whole staging repo with > > > >> wget -erobots=off -r -l inf -np -nH \ > > > >> > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/ > > > >> # note the trailing slash is needed > > > >> > > > > > > > > > > > > > > > > > > -- Sean
