+1 binding ran "mvn clean package verify" on src contents verified signatures and checksums on bin and src verified license and notice files in bin and src.
Looked into the issue that Keith mentioned and fixed the website deployment job so the release notes are now updated. https://accumulo.apache.org/release/accumulo-2.1.3/ On Wed, Jul 31, 2024 at 9:07 PM Kevin Rathbun <krath...@apache.org> wrote: > +1 binding > > * verified sunny day tests pass with "mvn clean verify -Psunny" (src) > * verified signatures (bin + src) > * verified hashes (bin + src) > * verified LICENSE and NOTICE files both present at top-level (bin + src) > * verified no binary files in src ("grep -rIL --exclude-dir={target,test} > .") > > On 2024/07/29 06:10:26 Christopher wrote: > > Accumulo Developers, > > > > Please consider the following candidate for Apache Accumulo 2.1.3. > > > > Git Commit: > > 8f52dd10f7cbfef192c9cc431543619b7072139a > > Branch: > > 2.1.3-rc1 > > > > If this vote passes, a gpg-signed tag will be created using: > > git tag -f -s -m 'Apache Accumulo 2.1.3' rel/2.1.3 \ > > 8f52dd10f7cbfef192c9cc431543619b7072139a > > > > Staging repo: > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113 > > Source (official release artifact): > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-src.tar.gz > > Binary: > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/org/apache/accumulo/accumulo/2.1.3/accumulo-2.1.3-bin.tar.gz > > > > Append ".asc" to download the cryptographic signature for a given > artifact. > > (You can also append ".sha1" or ".md5" instead in order to verify the > checksums > > generated by Maven to verify the integrity of the Nexus repository > > staging area.) > > > > Signing keys are available at https://www.apache.org/dist/accumulo/KEYS > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > > > > In addition to the tarballs and their signatures, the following checksum > > files will be added to the dist/release SVN area after release: > > accumulo-2.1.3-src.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.3-src.tar.gz) = > > > d29d61200204501e2593ee6435200847e153e8444cf3d44431575ab257098750b11ad0d99fd3a24f3597a5962d20581697fa32ffc8a84336516e00b8c4400d92 > > accumulo-2.1.3-bin.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.3-bin.tar.gz) = > > > 1a27a144dc31f55ccc8e081b6c1bc6cc0362a8391838c53c166cb45291ff8f35867fd8e4729aa7b2c540f8b721f8c6953281bf589fc7fe320e4dc4d20b87abc4 > > > > Release notes (in progress) can be found at: > > https://accumulo.apache.org/release/accumulo-2.1.3 > > > > Release testing instructions: > > https://accumulo.apache.org/contributor/verifying-release > > > > Please vote one of: > > [ ] +1 - I have verified and accept... > > [ ] +0 - I have reservations, but not strong enough to vote against... > > [ ] -1 - Because..., I do not accept... > > ... these artifacts as the 2.1.3 release of Apache Accumulo. > > > > This vote will remain open until at least Thu Aug 1 06:30:00 AM UTC > 2024. > > (Thu Aug 1 02:30:00 AM EDT 2024 / Wed Jul 31 11:30:00 PM PDT 2024) > > Voting can continue after this deadline until the release manager > > sends an email ending the vote. > > > > Thanks! > > > > P.S. Hint: download the whole staging repo with > > wget -erobots=off -r -l inf -np -nH \ > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1113/ > > # note the trailing slash is needed > > >
