Also, the AGE Viewer artifact has the version 1.0.0-rc2 and is served from GitHub whereas the checksum and signature have the version 1.0.0 and are served from
https://downloads.apache.org/incubator/age/viewer/1.0.0/ which redirects to https://archive.apache.org/dist/incubator/age/viewer/1.0.0/ If the Viewer is a current release must be served from downloads.a.o. In any case, ASF source releases must be served from ASF hosts, not from GitHub. On Wed, 27 Mar 2024 at 00:03, sebb <seb...@gmail.com> wrote: > > I see you have fixed some of the issues, however the artifacts still > do not use closer.lua > > Also the PostgreSQL 11 links are a mixture of 1.4.0 and 1.5.0 > versions. The display text does not match the underlying link. > > Furthermore, 'Signature' is mis-spelt several times. > > Also 'KEY Files' should really be 'KEYS'; there is only one KEYS file > which contains all the keys. > > Thanks, > Sebb > > On Tue, 26 Mar 2024 at 16:56, sebb <seb...@gmail.com> wrote: > > > > The download page at https://age.apache.org/download has a few problems: > > > > - artifacts MUST be linked using closer.lua > > - No link to the KEYS file > > - No instructions on how to verify sigs or checksums > > > > It's not immediately obvious what PG15 etc mean. > > > > Please see: > > https://infra.apache.org/release-download-pages.html > > > > Sebb
