Isn't this ASFv2? https://mvnrepository.com/artifact/com.google.code.findbugs/jsr305
Sijie On Dec 18, 2017 7:20 AM, "Ivan Kelly" <iv...@apache.org> wrote: -1 again I'm afraid. The JSR305 jar is unaccounted for. Source code is hard to track down, but it turn up at https://code.google.com/archive/p/jsr-305/source/default/source This jar is New BSD licensed, but also has some files under Creative commons Attribution License, though they don't mention this in their own LICENSE, which is strange and annoying. Do we even need this jar? -Ivan On Mon, Dec 18, 2017 at 2:57 PM, Enrico Olivelli <eolive...@gmail.com> wrote: > 2017-12-18 2:00 GMT+01:00 Jia Zhai <zhai...@apache.org>: > >> Hi everyone, >> >> Please review and vote on the release candidate #2 for the version >> 4.6.0, as follows: >> [ ] +1, Approve the release >> [ ] -1, Do not approve the release (please provide specific comments) >> > > > +1 (non binding) > Run tests from source package > Checked signatures and md5/sha1 for staged artifacts > Run test from my projects > Run basic commands in the shell with a single machine cluster > Started bookie with Prometheus stats provider > > I noticed an ephemeral port opened by the bookie but I can't remember the > reason > > Thank you Jia > Enrico > > > >> >> This new release candidate mainly fixed the license issue. >> >> The complete staging area is available for your review, which includes: >> * Release notes [1] >> * The official Apache source and binary distributions to be deployed >> to dist.apache.org [2] >> * All artifacts to be deployed to the Maven Central Repository [3] >> * Source code tag "release-4.6.0" [4] with sha >> 0d6c21e0a88749c428749841db59cf53195e556c >> >> BookKeeper's KEYS file contains PGP keys we used to sign this >> release:https://dist.apache.org/repos/dist/release/bookkeeper/KEYS >> >> Please download these packages and review this release candidate: >> >> - Review release notes >> - Download the source package (verify md5, shasum, and asc) and follow the >> instructions to build and run the bookkeeper service. >> - Download the binary package (verify md5, shasum, and asc) and follow the >> instructions to run the bookkeeper service. >> - Review maven repo, release tag, licenses, and any other things you think >> it is important to a release. >> >> The vote will be open for at least 72 hours. It is adopted by majority >> approval, with at least 3 PMC affirmative votes. >> >> Thanks, >> Jia Zhai >> >> [1] *https://github.com/apache/bookkeeper/pull/759 >> <https://github.com/apache/bookkeeper/pull/759>* >> [2] *https://dist.apache.org/repos/dist/dev/bookkeeper/ >> bookkeeper-4.6.0-rc2/ >> <https://dist.apache.org/repos/dist/dev/bookkeeper/bookkeeper-4.6.0-rc2/ >* >> [3] >> https://repository.apache.org/content/repositories/ >> orgapachebookkeeper-1023/ >> [4] https://github.com/apache/bookkeeper/tree/release-4.6.0 >>
