I'm not suggesting ignoring the issues. I was suggesting prioritizing them after careful consideration, like we would any other problem.
On Thu, Sep 10, 2015 at 2:49 PM John Vines <[email protected]> wrote: > -1 > > I'm with Sean on this one. Ignoring now known licensing issues because we > hadn't handled them in the past is not a valid excuse. > > On Thu, Sep 10, 2015 at 2:27 PM Sean Busbey <[email protected]> wrote: > > > As members of the PMC, we're required to verify all releases we approve > of > > meet ASF licensing policy[1], so I don't consider the issues "minor". > > > > Mistakenly violating policy in the past is a different kind of problem > than > > moving forward to knowingly violate it. > > > > In particular, not all of the bundled works have copyrights that are > > covered under a donation to the Foundation. If we distribute e.g. the > > accumulo-core binary jar in its current state the foundation will be > > committing willful copyright infringement. The binary tarball (and I'd > > imagine the rpm/deb files) have similar problems because we'd be > violating > > the terms of the included works' respective licenses. > > > > > > [1]: > > http://www.apache.org/dev/release.html#what-must-every-release-contain > > > > On Thu, Sep 10, 2015 at 11:51 AM, Billie Rinaldi < > [email protected] > > > > > wrote: > > > > > Agreed. > > > > > > On Thu, Sep 10, 2015 at 9:47 AM, Christopher <[email protected]> > > wrote: > > > > > > > I think the license issues are relatively small compared to the > > bugfixes, > > > > especially since we're really trying to close out 1.5.x development. > > So, > > > > given the options, I'd prefer to pass RC1, and make the license fixes > > in > > > > 1.6.x and later, as applicable. > > > > > > > > On Thu, Sep 10, 2015 at 12:28 PM Josh Elser <[email protected]> > wrote: > > > > > > > > > Thanks again for taking the time to inspect things so thoroughly, > > Sean. > > > > > > > > > > Others who have already voted, I'd ask for your opinion on whether > we > > > > > should sink this release (instead of me blindly going by majority > > > rule). > > > > > > > > > > Personally, I'm presently of the opinion that, given the severity > of > > > the > > > > > bug(s) fixed in this release already, RC1 should pass. Considering > > that > > > > > we've been making releases like this for quite some time w/o issue > > and > > > > > 1.5 is all but dead, let's push this release out, (again) table 1.5 > > and > > > > > then make these improvements to 1.6 before we cut an RC there there > > > when > > > > > we have time to thoroughly vet the changes (instead of the 11th > hour > > of > > > > > a vote). > > > > > > > > > > If there's a need for lengthy discussion, let's break this off the > > VOTE > > > > > thread (I leave this message here for visibility). > > > > > > > > > > - Josh > > > > > > > > > > Sean Busbey wrote: > > > > > > -1 > > > > > > > > > > > > * signatures check out > > > > > > * checksums match > > > > > > * licensing errors noted in ACCUMULO-3988 > > > > > > > > > > > > On Sat, Sep 5, 2015 at 4:27 PM, Josh Elser<[email protected]> > > > wrote: > > > > > > > > > > > >> Accumulo Developers, > > > > > >> > > > > > >> Please consider the following candidate for Accumulo 1.5.4. > > > > > >> > > > > > >> Git Commit: > > > > > >> 12a1041dcbb7f3b10543c305f27ece4b0d65ab9c > > > > > >> Branch: > > > > > >> 1.5.4-rc1 > > > > > >> > > > > > >> If this vote passes, a gpg-signed tag will be created using: > > > > > >> git tag -f -m 'Apache Accumulo 1.5.4' -s 1.5.4 > > > > > >> 12a1041dcbb7f3b10543c305f27ece4b0d65ab9c > > > > > >> > > > > > >> Staging repo: > > > > > >> > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039 > > > > > >> Source (official release artifact): > > > > > >> > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-src.tar.gz > > > > > >> Binary: > > > > > >> > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/org/apache/accumulo/accumulo/1.5.4/accumulo-1.5.4-bin.tar.gz > > > > > >> (Append ".sha1", ".md5", or ".asc" to download the > signature/hash > > > for > > > > a > > > > > >> given artifact.) > > > > > >> > > > > > >> All artifacts were built and staged with: > > > > > >> mvn release:prepare&& mvn release:perform > > > > > >> > > > > > >> Signing keys are available at > > > > https://www.apache.org/dist/accumulo/KEYS > > > > > >> (Expected fingerprint: ABC8914C675FAD3FA74F39B2D146D62CAB471AE9) > > > > > >> > > > > > >> Release notes (in progress) can be found at > > > > > >> https://accumulo.apache.org/release_notes/1.5.4 > > > > > >> > > > > > >> Please vote one of: > > > > > >> [ ] +1 - I have verified and accept... > > > > > >> [ ] +0 - I have reservations, but not strong enough to vote > > > against... > > > > > >> [ ] -1 - Because..., I do not accept... > > > > > >> ... these artifacts as the 1.5.4 release of Apache Accumulo. > > > > > >> > > > > > >> This vote will end on Thurs Sep 10 23:00:00 UTC 2015 > > > > > >> (Thurs Sep 10 20:00:00 EDT 2015 / Thurs Sep 10 17:00:00 PDT > > 2015) > > > > > >> > > > > > >> Thanks! > > > > > >> > > > > > >> P.S. Hint: download the whole staging repo with > > > > > >> wget -erobots=off -r -l inf -np -nH \ > > > > > >> > > > > > >> > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1039/ > > > > > >> # note the trailing slash is needed > > > > > >> > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > Sean > > >
