Hi.

Le mer. 15 avr. 2026 à 17:02, Alex Herbert <[email protected]> a écrit :
>
> We have fixed quite a few bugs and added some significant enhancements
> since Apache Commons Numbers 1.2 was released,
> so I would like to release Apache Commons Numbers 1.3.
>
> Apache Commons Numbers 1.3 RC1 is available for review here:
>     https://dist.apache.org/repos/dist/dev/commons/numbers/1.3-RC1 (svn
> revision 83807)
>
> [...]
>
> You may checkout this tag using:
>     git clone https://gitbox.apache.org/repos/asf/commons-numbers.git 
> --branch commons-numbers-1.3-RC1 commons-numbers-1.3-RC1

$ mvn
[... skipped ...]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  03:15 min
[INFO] Finished at: 2026-04-16T15:36:04+02:00
[INFO] ------------------------------------------------------------------------

$ mvn --version
Apache Maven 3.9.9
Maven home: /usr/share/maven
Java version: 21.0.10, vendor: Debian, runtime:
/usr/lib/jvm/java-21-openjdk-amd64
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "6.12.74+deb13+1-amd64", arch: "amd64",
family: "unix"

$ git tag -v commons-numbers-1.3-RC1
object ae8abefb51c2c4d1a05882d61cefc8015e493a8f
type commit
tag commons-numbers-1.3-RC1
tagger Alex Herbert <[email protected]> 1776261574 +0100

RC1
gpg: Signature made Wed 15 Apr 2026 03:59:34 PM CEST
gpg:                using RSA key BC87A3FD0A54480F0BADBEBD21939FF0CA2A6567
gpg:                issuer "[email protected]"
gpg: Good signature from "Alex Herbert (CODE SIGNING KEY)
<[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: BC87 A3FD 0A54 480F 0BAD  BEBD 2193 9FF0 CA2A 6567

$ mvn clean install site site:stage -Pexamples
[... skipped ...]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  06:07 min
[INFO] Finished at: 2026-04-16T15:52:45+02:00
[INFO] ------------------------------------------------------------------------

> Maven artifacts are here:
>
> https://repository.apache.org/content/repositories/orgapachecommons-1927/org/apache/commons/
>
> These are the artifacts and their hashes:
>

Confusing/contradicting (?) error message when running
$ ./signature-validator.sh
[... skipped ...]
ERROR:
We expect the a url like
https://repository.apache.org/content/repositories/orgapachecommons-1531/commons-net/commons-net/3.7.1/
to be passed in as a parameter to the script.
INFO: Downloading artifacts from nexus
INFO: Validating Signatures in
/home/gilles/devel/apache/release_check/1.3-RC1/artifacts-for-validation-deletable-post-validation
SUCCESSFUL VALIDATION

Whether it was _really_ "successful"; I don't know.  With or without the
  
https://repository.apache.org/content/repositories/orgapachecommons-1927/org/apache/commons/
passed as argument to script, the same directory
  artifacts-for-validation-deletable-post-validation
is created, with the same contents.
[Nit: In the script itself, it is documented as "signature-validation.sh"
(instead of "signature-validator.sh") and the doc does not mention the
(supposedly required) argument.]

> [...]
>
>
> RAT Report:
>
> https://dist.apache.org/repos/dist/dev/commons/numbers/1.3-RC1/site/rat-report.html

This contains:
---CUT---
*****************************************************
Files with unapproved licenses
*****************************************************

  /src/site/resources/release-notes/RELEASE-NOTES-1.0-beta1.txt
  /src/site/resources/release-notes/RELEASE-NOTES-1.0.txt
  /src/site/resources/release-notes/RELEASE-NOTES-1.1.txt
  /src/site/resources/release-notes/RELEASE-NOTES-1.2.txt
  /src/site/resources/release-notes/RELEASE-NOTES-1.3.txt
---CUT---

>
> KEYS:
>   https://downloads.apache.org/commons/KEYS
>
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
>
[X] +1 Release these artifacts
>   [ ] +0 OK, but...
>   [ ] -0 OK, but really should fix...
>   [ ] -1 I oppose this release because...

Regards,
Gilles

> [...]

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to