+1 - package looks good, with notice, license and other pieces as expected - GPG verified - SHA512 checked - "mvn test" passes
On Tue, Mar 19, 2024 at 10:59 PM Jon Malkin <[email protected]> wrote: > Hello everyone, > > This is a call for vote to release Apache DataSketches-java candidate > version: 5.0.2-rc1 > > This is a PATCH release. No new functionality has been introduced. There > are a number of changes stemming from two issues: > - Issue 527 > <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/issues/527__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpjsoD6HQ$>: > Properly use the comparator for sorting level 0 in the KllItemsSketch > - A new version of SpotBugs created a number of potential security > warnings around Finalizer Attacks. Having done our best to look into the > matter, we do not believe sketches are meaningfully vulnerable -- any data > in the sketches is already available via reflection and there are no > methods with special conditional access. Regardless, we felt that good code > hygiene meant that we should prioritize fixing any issues found. > > 1. Source repository: > - https://github.com/apache/datasketches-java > <https://urldefense.com/v3/__https://github.com/apache/datasketches-java__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpXLRYE0A$> > > Git Tag for this release: > - https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1 > <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrqzNgdew$> > on branch 5.0.X > > Git HashId for this release starts with: 9acc425 > > 2. The Release Candidate / Zip Repository: > - https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1 > <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoGfJ3_Gg$> > > The public signing key can be found in the KEYS file: > - https://dist.apache.org/repos/dist/dev/datasketches/KEYS > <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/KEYS__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxqINaX31w$> > > The artifacts have been signed with key: > 41A98F6038F334CC Jon Malkin (Apache code signing) < > [email protected]> > > 3. Repository: Maven Central [Nexus](http://repository.apache.org > <https://urldefense.com/v3/__http://repository.apache.org__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoUNbWKHg$>) > (Jar Artifacts): > - > https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/ > <https://urldefense.com/v3/__https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxo_Wg3AgQ$> > > 4. Build & Test Guide: > - https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md > <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrYTtcHrg$> > > 5. The vote will be performed as follows: > - This letter will be published on dev@ and remain open for at least > 72 hours (excluding weekends and holidays), AND until at least 3 (+1) PMC > votes or a majority of (+1) PMC votes are acquired. Anyone in the > community can vote. This vote will close no earlier than Friday, March > 22, 11:00 PM PDT. > > Please vote accordingly: > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > Thanks, > Jon Malkin > [email protected] > >
