+1 (binding) verified hashes On Tue, Mar 3, 2020 at 11:20 AM Luke Cwik <lc...@google.com> wrote:
> +1 (binding) > Verified signatures > Verified that there are no conscrypt classes in jar > Verified pom.xml has runtime dependency on conscrypt > > On Tue, Mar 3, 2020 at 10:35 AM Jean-Baptiste Onofré <j...@nanthrax.net> > wrote: > >> +1 (binding) >> >> Regards >> JB >> >> Le mar. 3 mars 2020 ? 19:31, Luke Cwik <lc...@google.com> a ?crit : >> >>> Please review the release of the following artifacts that we vendor: >>> * beam-vendor-grpc-1_26_0 >>> >>> Hi everyone, >>> Please review and vote on the release candidate #1 for the version 0.3, >>> as follows: >>> [ ] +1, Approve the release >>> [ ] -1, Do not approve the release (please provide specific comments) >>> >>> >>> The complete staging area is available for your review, which includes: >>> * the official Apache source release to be deployed to dist.apache.org [1], >>> which is signed with the key with >>> fingerprint EAD5DE293F4A03DD2E77565589E68A56E371CCA2 [2], >>> * all artifacts to be deployed to the Maven Central Repository [3], >>> * commit hash "7df0d6cda0b1e1d5d360ea68c9ee01ca35acc230" [4], >>> >>> The vote will be open for at least 72 hours. It is adopted by majority >>> approval, with at least 3 PMC affirmative votes. >>> >>> Thanks, >>> Release Manager >>> >>> [1] https://dist.apache.org/repos/dist/dev/beam/vendor/ >>> [2] https://dist.apache.org/repos/dist/release/beam/KEYS >>> [3] >>> https://repository.apache.org/content/repositories/orgapachebeam-1096/ >>> [4] >>> https://github.com/apache/beam/commit/7df0d6cda0b1e1d5d360ea68c9ee01ca35acc230 >>> >>