Apologies, Lee pointed out that the correct git hash for this release should be: ba29502062bbc543f819d9bc7a23829515bf2ac9
The provided links all point to the correct tag. jon On Wed, Mar 20, 2024 at 2:06 PM Alexander Saydakov <[email protected]> wrote: > +1 > > - package looks good, with notice, license and other pieces as expected > - GPG verified > - SHA512 checked > - "mvn test" passes > > On Tue, Mar 19, 2024 at 10:59 PM Jon Malkin <[email protected]> wrote: > >> Hello everyone, >> >> This is a call for vote to release Apache DataSketches-java candidate >> version: 5.0.2-rc1 >> >> This is a PATCH release. No new functionality has been introduced. There >> are a number of changes stemming from two issues: >> - Issue 527 >> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/issues/527__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpjsoD6HQ$>: >> Properly use the comparator for sorting level 0 in the KllItemsSketch >> - A new version of SpotBugs created a number of potential security >> warnings around Finalizer Attacks. Having done our best to look into the >> matter, we do not believe sketches are meaningfully vulnerable -- any data >> in the sketches is already available via reflection and there are no >> methods with special conditional access. Regardless, we felt that good code >> hygiene meant that we should prioritize fixing any issues found. >> >> 1. Source repository: >> - https://github.com/apache/datasketches-java >> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpXLRYE0A$> >> >> Git Tag for this release: >> - https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1 >> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrqzNgdew$> >> on branch 5.0.X >> >> Git HashId for this release starts with: 9acc425 >> >> 2. The Release Candidate / Zip Repository: >> - https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1 >> <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoGfJ3_Gg$> >> >> The public signing key can be found in the KEYS file: >> - https://dist.apache.org/repos/dist/dev/datasketches/KEYS >> <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/KEYS__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxqINaX31w$> >> >> The artifacts have been signed with key: >> 41A98F6038F334CC Jon Malkin (Apache code signing) < >> [email protected]> >> >> 3. Repository: Maven Central [Nexus](http://repository.apache.org >> <https://urldefense.com/v3/__http://repository.apache.org__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoUNbWKHg$>) >> (Jar Artifacts): >> - >> https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/ >> <https://urldefense.com/v3/__https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxo_Wg3AgQ$> >> >> 4. Build & Test Guide: >> - >> https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md >> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrYTtcHrg$> >> >> 5. The vote will be performed as follows: >> - This letter will be published on dev@ and remain open for at least >> 72 hours (excluding weekends and holidays), AND until at least 3 (+1) PMC >> votes or a majority of (+1) PMC votes are acquired. Anyone in the >> community can vote. This vote will close no earlier than Friday, March >> 22, 11:00 PM PDT. >> >> Please vote accordingly: >> >> [ ] +1 approve >> [ ] +0 no opinion >> [ ] -1 disapprove with the reason >> >> Thanks, >> Jon Malkin >> [email protected] >> >>
