+1 binding
* verified sunny day tests pass with "mvn clean verify -Psunny" (src)
* verified signatures (bin + src)
* verified hashes (bin + src)
* verified LICENSE and NOTICE files both present at top-level (bin + src)
* verified no binary files in src ("grep -rIL --exclude-dir={target,test} .")
On 2024/07/29 06:10:26 Christopher wrote:
> Accumulo Developers,
>
> Please consider the following candidate for Apache Accumulo 2.1.3.
>
> Git Commit:
> 8f52dd10f7cbfef192c9cc431543619b7072139a
> Branch:
> 2.1.3-rc1
>
> If this vote passes, a gpg-signed tag will be created using:
> git tag -f -s -m 'Apache Accumulo 2.1.3' rel/2.1.3 \
> 8f52dd10f7cbfef192c9cc431543619b7072139a
>
> Staging repo:
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1113
> Source (official release artifact):
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-src.tar.gz
> Binary:
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-bin.tar.gz
>
> Append ".asc" to download the cryptographic signature for a given artifact.
> (You can also append ".sha1" or ".md5" instead in order to verify the
> checksums
> generated by Maven to verify the integrity of the Nexus repository
> staging area.)
>
> Signing keys are available at https://www.apache.org/dist/accumulo/KEYS
> (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D)
>
> In addition to the tarballs and their signatures, the following checksum
> files will be added to the dist/release SVN area after release:
> accumulo-2.1.3-src.tar.gz.sha512 will contain:
> SHA512 (accumulo-2.1.3-src.tar.gz) =
> d29d61200204501e2593ee6435200847e153e8444cf3d44431575ab257098750b11ad0d99fd3a24f3597a5962d20581697fa32ffc8a84336516e00b8c4400d92
> accumulo-2.1.3-bin.tar.gz.sha512 will contain:
> SHA512 (accumulo-2.1.3-bin.tar.gz) =
> 1a27a144dc31f55ccc8e081b6c1bc6cc0362a8391838c53c166cb45291ff8f35867fd8e4729aa7b2c540f8b721f8c6953281bf589fc7fe320e4dc4d20b87abc4
>
> Release notes (in progress) can be found at:
> https://accumulo.apache.org/release/accumulo-2.1.3
>
> Release testing instructions:
> https://accumulo.apache.org/contributor/verifying-release
>
> Please vote one of:
> [ ] +1 - I have verified and accept...
> [ ] +0 - I have reservations, but not strong enough to vote against...
> [ ] -1 - Because..., I do not accept...
> ... these artifacts as the 2.1.3 release of Apache Accumulo.
>
> This vote will remain open until at least Thu Aug 1 06:30:00 AM UTC 2024.
> (Thu Aug 1 02:30:00 AM EDT 2024 / Wed Jul 31 11:30:00 PM PDT 2024)
> Voting can continue after this deadline until the release manager
> sends an email ending the vote.
>
> Thanks!
>
> P.S. Hint: download the whole staging repo with
> wget -erobots=off -r -l inf -np -nH \
> https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/
> # note the trailing slash is needed
>
