+1 (binding)
I checked in Daffodil SBT Plugin:
[OK] release page has correct information, links, and documentation
[OK] signature of git tag verifies
[OK] hashes and signatures of source and helper binaries are correct
[OK] source and helper binaries are 100% reproducible
[OK] source release matches git tag
[OK] source compiles and all tests pass
[OK] source and helper binaries include correct LICENSE/NOTICE
[OK] RAT check passes, no unexpected binaries in source
[OK] regression suite of public and private DFDL projects pass tests
[OK] packageDaffodilBin output works with all respective daffodil CLI versions
[OK] no open CVE's found using sbt dependencyCheck
- Found a number of CVEs, but they are all SBT provided dependencies. So
whether or not those libraries are actually used depends on the SBT
version and not anything we control
On 2026-03-10 03:01 PM, Steve Lawrence wrote:
Hi all,
I'd like to call a vote to release of Apache Daffodil SBT Plugin 1.7.0-rc1.
All distribution packages, including signatures, digests, etc. can be found at:
https://dist.apache.org/repos/dist/dev/daffodil/daffodil-sbt/1.7.0-rc1/
Staging artifacts can be found at:
https://repository.apache.org/content/repositories/orgapachedaffodil-1060/
The release candidate has been tagged in git with v1.7.0-rc1.
For reference, here is a list of all resolved issues in the 1.7.0 milestone:
https://github.com/apache/daffodil-sbt/milestone/8?closed=1
For a summary of the changes in this release, see:
https://daffodil.apache.org/sbt/1.7.0/
This release has been signed with PGP key
24E1775CC44ED9CED4CF03672F0FBAA76B492842, corresponding to the Apache Daffodil
Automated Release Signing Key, which is included in the KEYS file here:
https://downloads.apache.org/daffodil/KEYS
Please review and vote. Steps to automate some verification steps are described
here:
https://cwiki.apache.org/confluence/display/DAFFODIL/Release+Verification
The vote will be open for at least 72 hours (Friday, 13 March 2026, 3:00 PM
EDT).
[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)
Thanks,
- Steve
