On 26 December 2017 at 18:48, Matt Sicker <boa...@gmail.com> wrote: > On 26 December 2017 at 04:27, Stephen Connolly < > stephen.alan.conno...@gmail.com> wrote: > >> Personally... I see no reason to remove them from going to Nexus staging >> (in fact I have a background plan to add secondary signing support to >> staging... i’m Waiting to see the Nexus 3 staging APIs before attempting >> though. That would mean that the PMC would be able to *add* their GPG >> signature to the staged artifacts as part of the voting... in which case >> you’d want to hold off uploading to dist until *after* the vote so you get >> the full set of signatures) >>
It would be better to upload the original files (including RM-only sig) to dist/dev. The updated sigs can always be replaced on dist/dev just before publication. > Wow, this sounds really cool! So the PMC votes can add a vote by adding > their GPG signature? That's a really nifty idea. > > -- > Matt Sicker <boa...@gmail.com> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
