+1 (binding) from me, I have checked: 1. All the download links are valid; 2. Signature and checksum are good; 3. LICENSE and NOTICE file exist; 4. version number is correct;
By the way, the Copyright header in NOTICE file should be updated (to 2022). Best regards Chao Zhang https://github.com/tokers On Wed, Jan 5, 2022 at 5:26 PM Zeping Bai <bzp2...@apache.org> wrote: > > Hello, Community, > This is a call for the vote to release Apache APISIX version 2.10.3 > > Release notes: > > https://github.com/apache/apisix/blob/release/2.10/CHANGELOG.md#2103 > > The release candidates: > > https://dist.apache.org/repos/dist/dev/apisix/2.10.3/ > > Release Commit ID: > > https://github.com/apache/apisix/commit/d9be046028db5850a752f3b872fe21a6bc376e66 > > Keys to verify the Release Candidate: > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > Steps to validating the release: > > 1. Download the release > > wget > https://dist.apache.org/repos/dist/dev/apisix/2.10.3/apache-apisix-2.10.3 > -src.tgz > > 2. Checksums and signatures > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > wget > https://dist.apache.org/repos/dist/dev/apisix/2.10.3/apache-apisix-2.10.3 > -src.tgz.asc > > wget > https://dist.apache.org/repos/dist/dev/apisix/2.10.3/apache-apisix-2.10.3 > -src.tgz.sha512 > > gpg --import KEYS > > # Input "trust", then input number 5, then input "save" > gpg --edit-key "Zeping Bai" > > shasum -c apache-apisix-2.10.3-src.tgz.sha512 > > gpg --verify apache-apisix-2.10.3-src.tgz.asc apache-apisix-2.10.3-src.tgz > > 3. Unzip and Check files > > tar zxvf apache-apisix-2.10.3-src.tgz > > 4. Build Apache APISIX: > > https://github.com/apache/apisix/blob/release/2 > .10/docs/en/latest/how-to-build.md#installation-via-source-release-package > > The vote will be open for at least 72 hours or until the necessary number of > votes are reached. > > Please vote accordingly: > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > Thanks! > Zeping Bai @bzp2010
