+1 - checked asc and sha signature - built files and ran maven test with no issues.
On Sat, 23 Mar 2024 at 00:04, Lee Rhodes <[email protected]> wrote: > +1 > - asc, sha512 checked > - checked out the 5.0.2-rc1 tag at commit ba29502 and mvn test works fine. > (The original git hash was incorrect, but Jon has corrected that.) > - also checked the git-properties file in the actual 5.0.2-src.zip file on > /dist/ = ba29502. > - NOTICE & LICENSE look fine. > > > > On Wed, Mar 20, 2024 at 2:06 PM Alexander Saydakov > <[email protected]> wrote: > >> +1 >> >> - package looks good, with notice, license and other pieces as expected >> - GPG verified >> - SHA512 checked >> - "mvn test" passes >> >> On Tue, Mar 19, 2024 at 10:59 PM Jon Malkin <[email protected]> wrote: >> >>> Hello everyone, >>> >>> This is a call for vote to release Apache DataSketches-java candidate >>> version: 5.0.2-rc1 >>> >>> This is a PATCH release. No new functionality has been introduced. There >>> are a number of changes stemming from two issues: >>> - Issue 527 >>> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/issues/527__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpjsoD6HQ$>: >>> Properly use the comparator for sorting level 0 in the KllItemsSketch >>> - A new version of SpotBugs created a number of potential security >>> warnings around Finalizer Attacks. Having done our best to look into the >>> matter, we do not believe sketches are meaningfully vulnerable -- any data >>> in the sketches is already available via reflection and there are no >>> methods with special conditional access. Regardless, we felt that good code >>> hygiene meant that we should prioritize fixing any issues found. >>> >>> 1. Source repository: >>> - https://github.com/apache/datasketches-java >>> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxpXLRYE0A$> >>> >>> Git Tag for this release: >>> - https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1 >>> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/releases/tag/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrqzNgdew$> >>> on branch 5.0.X >>> >>> Git HashId for this release starts with: 9acc425 >>> >>> 2. The Release Candidate / Zip Repository: >>> - https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1 >>> <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/java/5.0.2-rc1__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoGfJ3_Gg$> >>> >>> The public signing key can be found in the KEYS file: >>> - https://dist.apache.org/repos/dist/dev/datasketches/KEYS >>> <https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/datasketches/KEYS__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxqINaX31w$> >>> >>> The artifacts have been signed with key: >>> 41A98F6038F334CC Jon Malkin (Apache code signing) < >>> [email protected]> >>> >>> 3. Repository: Maven Central [Nexus](http://repository.apache.org >>> <https://urldefense.com/v3/__http://repository.apache.org__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxoUNbWKHg$>) >>> (Jar Artifacts): >>> - >>> https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/ >>> <https://urldefense.com/v3/__https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/5.0.2/__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxo_Wg3AgQ$> >>> >>> 4. Build & Test Guide: >>> - >>> https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md >>> <https://urldefense.com/v3/__https://github.com/apache/datasketches-java/blob/5.0.2-rc1/README.md__;!!Op6eflyXZCqGR5I!GIvNIwuQphgUx3fCir4IiGIXbLHGKGIbO2rat9dpkko3MUrkCBts6j1yk22aWkk7uHUGXq38dxrYTtcHrg$> >>> >>> 5. The vote will be performed as follows: >>> - This letter will be published on dev@ and remain open for at least >>> 72 hours (excluding weekends and holidays), AND until at least 3 (+1) PMC >>> votes or a majority of (+1) PMC votes are acquired. Anyone in the >>> community can vote. This vote will close no earlier than Friday, March >>> 22, 11:00 PM PDT. >>> >>> Please vote accordingly: >>> >>> [ ] +1 approve >>> [ ] +0 no opinion >>> [ ] -1 disapprove with the reason >>> >>> Thanks, >>> Jon Malkin >>> [email protected] >>> >>>
