Those files are extraneous artifacts from old Maven releases (where everything got a checksum, even signature files) - this was fixed in https://issues.apache.org/jira/browse/MNG-5504
They aren’t exposed from the site download page, and don’t provide any extra security over the existing checksums/signatures of the primary files - so can be cleaned up for consistency On Friday, 13 November 2015 at 11:19, Pierre De Rop wrote: > I will try to do it, but before I have a question: > > it seems that there is a diff between the files currently committed in the > Felix release repository and this new release candidate: Indeed, in the > release repository, we currently have the following signatures files that > are not present in this new release candidate: > > from https://dist.apache.org/repos/dist/release/felix/: > > maven-bundle-plugin-3.0.0.jar.asc.md5 > maven-bundle-plugin-3.0.0.jar.asc.sha1 > maven-bundle-plugin-3.0.0-javadoc.jar.asc.md5 > maven-bundle-plugin-3.0.0-javadoc.jar.asc.sha1 > maven-bundle-plugin-3.0.0.pom.asc.md5 > maven-bundle-plugin-3.0.0.pom.asc.sha1 > maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.md5 > maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.sha1 > maven-bundle-plugin-3.0.0-source-release.zip.asc.md5 > maven-bundle-plugin-3.0.0-source-release.zip.asc.sha1 > maven-bundle-plugin-3.0.0-sources.jar.asc.md5 > maven-bundle-plugin-3.0.0-sources.jar.asc.sha1 > > I guess that in the previous release (currently in the felix release repo), > the above files were not necessary. > I just would like that someone confirms this ? > > thanks; > > -> Pierre > > > > On Wed, Nov 11, 2015 at 7:41 PM, Benson Margulies <bimargul...@gmail.com > (mailto:bimargul...@gmail.com)> > wrote: > > > I'll send the announcement when I get word that someone has committed > > the release package to the dist area. > > > > > > On Wed, Nov 11, 2015 at 1:22 PM, Benson Margulies <bimargul...@gmail.com > > (mailto:bimargul...@gmail.com)> > > wrote: > > > Hi, the vote has passed with the following result: > > > > > > +1 (binding): > > > > > > Pierre De Rop > > > David Bosschaert > > > Stuart McCulloch > > > > > > +1 (not binding): > > > > > > Stefan Seifart, Jean-Baptiste Onofré, Jamie Goodyear. > > > > > > I will promote. PMC members, one of you has to put the source into the > > > distro area, I cannot. > > > > > > > > > > > > On Wed, Nov 11, 2015 at 1:14 PM, Pierre De Rop <pierre.de...@gmail.com > > > (mailto:pierre.de...@gmail.com)> > > wrote: > > > > Hello Benson, > > > > > > > > I was about to vote: +1 > > > > > > > > regards; > > > > /Pierre > > > > > > > > On Wed, Nov 11, 2015 at 7:12 PM, Benson Margulies < > > bimargul...@gmail.com (mailto:bimargul...@gmail.com)> > > > > wrote: > > > > > > > > > We are still one PMC vote short here. > > > > > > > > > > On Tue, Nov 10, 2015 at 7:13 PM, Jamie G. <jamie.goody...@gmail.com > > > > > (mailto:jamie.goody...@gmail.com)> > > > > > wrote: > > > > > > +1 (non-binding) > > > > > > > > > > > > On Tue, Nov 10, 2015 at 11:50 AM, Benson Margulies > > > > > > <bimargul...@gmail.com (mailto:bimargul...@gmail.com)> wrote: > > > > > > > Thank You. Perhaps I will change that doc page to mention that a > > > > > > > PMC > > > > > > > member might be required. > > > > > > > > > > > > > > On Tue, Nov 10, 2015 at 7:30 AM, Stuart McCulloch < > > mccu...@gmail.com (mailto:mccu...@gmail.com)> > > > > > wrote: > > > > > > > > No worries, I’ve just added your key and confirmed it matches > > > > > > > > the > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > one > > > > > used to sign the artifacts > > > > > > > > > > > > > > > > On Tuesday, 10 November 2015 at 12:15, Benson Margulies wrote: > > > > > > > > > > > > > > > > > No can do with the signature. As a mere committer, I can't > > > > > > > > > commit > > to > > > > > > > > > the dist area. Only PMC members can do that. > > > > > > > > > > > > > > > > > > -----BEGIN PGP PUBLIC KEY BLOCK----- > > > > > > > > > Version: GnuPG v1 > > > > > > > > > > > > > > > > > > mQINBEzDDl0BEADHvJW2uff8vfxbfy0IvNOK4aytU+HVEvKEmuSqYEzC8i3BF6RT > > > > > > > > > LOxTeRFlu92rYz5ypD0mdNCzQaH0xbkcjialP6FpPCByrM9fFv6hmxZFSY71rvqz > > > > > > > > > Aw606I0t9rt94wc6p5Rl8NIso4rbFp2VQeu9hiydtyc5b6xh5mcCb2tYuihfByuL > > > > > > > > > ozt0ZWHDk1tZJk/XhSDVZ84jHrWRY2zSa2laIxH+KnJFto8BkTxQgrwEL1ipzoJr > > > > > > > > > n3DMIWOtWQR7hdSGWA/V+FgA4I7HXMXVrxolt5FesiWUXkZ7mVjglExv6Mwmf48V > > > > > > > > > TFfx46fz8vO6q93XQV705p2Csam78tvAMNYkJs2xZ9iaFIE8ET2cMgPie9yXlqTL > > > > > > > > > JGFRoFnTDM4HVW2hU6DsS7OAv0TjxZ94VPElrIrp7sK8MMe9+3qkTQkvUvLmbDOH > > > > > > > > > +i0LBw3ULKrod1oNe9VU8wyBBOaB5WqCfdjMWQoNb0IbgTXOyRRfO7YgA+KTtta1 > > > > > > > > > H91I8x15aW1ofnEjYDvrXmaScCVMJcaas/62XjlKlmwGJMcS69pVRlxdKGLjBDA4 > > > > > > > > > dg5gnZ+O/L792UwHOjuuqU3ix65xQ1t9Xrw5QsvTEhHLmbaJIrK9cT0UYvtUR/em > > > > > > > > > LJ7uVQOjL0PLnFGwntc0B0JldWT11oAtOV1rHgTrRn+HQzC6bTxx6eQlYQARAQAB > > > > > > > > > tClCZW5zb24gTWFyZ3VsaWVzIDxiaW1hcmd1bGllc0BhcGFjaGUub3JnPokCNwQT > > > > > > > > > AQoAIQUCTMMOXQIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRCcT36dmLHM > > > > > > > > > U2/KEACGKZVYVaSarUBdnZGpkgBEcdVxQulcPuAO6cK8omLesMJ365XFsFsWkDQY > > > > > > > > > TaOMsmoeuuhZw4IHf5M99BT0hPctdRAlrR5x2amWyOWrYUvutPVUrVFtC9W1tPn4 > > > > > > > > > VVf50r3hxrwIkNY5Ib7ynyCZL4N/4ExazvsRmKnu6KALvqcmyBZPal1MLaICo1k3 > > > > > > > > > wVJ8KCE84oja4BPgF4hDMrOh1JKEYtjaowCIJRZEZ29sBbkX1fEDl9c6Z78U37KT > > > > > > > > > 3asaPqS13CGsapQ99b9LrBVqXpbmZ+y3SwU+G8TU5RnitRUF9T9+JYD6jHgUM344 > > > > > > > > > qeAE8TMsd4C2n5cfEaAiwVuQ0u2ulxlw1VjUC3NaycSHcoPOehYdlD3IFE1QmwwA > > > > > > > > > XLbLVeCd27RxJ9+kLHsijdHUtwIaqmyC+qBXGof+NikpA+UHA1kgbW8MFgb1QRYN > > > > > > > > > DJWFQdIgB6H43pW7KxKT2fULYCUeOvt8nST+4X/YZwclAw5Cets2vtVcLvS5BdGz > > > > > > > > > +ANOyppjKH7DzWzYtnamMdS24i50zQu97vtaoijT3f4wW+dMP+mlusQ651+9rCcz > > > > > > > > > TXHYkHg9lKw9hy+jdphJPVTMH+QDkcJSsDFpi7k53iLHFcf2YwqK1BiYKoJXd6GH > > > > > > > > > FbjybE6c8nNfPywzhSKpM34UNY8EV/14sDonjBLQLnr4Z3NrWLkCDQRMww5dARAA > > > > > > > > > 9qZSA8fGWEppVjhJcJ7oFPzSeAEFeU0z/lASN6E6AaV75n63eQgx00s//2s+ty99 > > > > > > > > > tqp7a5giIhbSaH1EHQ71xBGalXBirWJnCf5/OkYIgoZUWovveNQHGANXjh6qKfwy > > > > > > > > > qe9SmWnMn28146LNXKxU/YO+UyYy1AC+0R/Woe5funUmv7db6q/y/+KC9Wbmue+M > > > > > > > > > HtAbFqDf07Gvp4rSNeSY97jki6dl9bfS5d/ofcvziBM4KCgalGaxTvYT6UI11i03 > > > > > > > > > YnW57WjtOstIZuJ1q1f8CC3OzTHRMwzoxLKmkfKXzEBxz9eM3fk3zYA6OTdSTOWl > > > > > > > > > 0akvAiPr2CW4pr3MvwHYw9wEAqWJwadQmBDCCLhRlOzqD4WIJA1C3y7vYtxI2OWf > > > > > > > > > wiUqtIantAr296vsamuhoiNXAG+GlpYaKasKLr/s7kHcdpH5oD2DkdVUiZHB2xs1 > > > > > > > > > ZjlgpafG71wHDiNKlJokJ4nZpQOoyDCXEdzr5uOz4fJ5Du4PUgG5y74Cu1JHZ0uJ > > > > > > > > > Le65D+MT2TmmiFeQHhT9Txdk2AVgf5uQjHDcIAvMI0niehT+l3zZ4YtRBviRksG4 > > > > > > > > > 349OecTu+33JoJGqtYnOcuPUR8HBB2dQrPK/l47SUg6esF5duznU4XkNskvbBWu3 > > > > > > > > > 2aiakTz7XiDm0TEzWtBS/hMRIeH4IyjNux8CwEJfV/MAEQEAAYkCHwQYAQoACQUC > > > > > > > > > TMMOXQIbDAAKCRCcT36dmLHMU2u/D/4umQeJcH06a2aM2ETXNVqDK29yti1tCSqs > > > > > > > > > 0jsZivZrK+O+oxqvTzcocYtQ2Fb8WjexGpQ41wN5zocH85cCPD+UisziV4r0NQYK > > > > > > > > > p1FhAJfkacIR4EtuEQrH2J7m4IDUXSqTW1jv36lXrAO/5ON07Wy3AROoJdFwrtO8 > > > > > > > > > ja0jX7Z+pe6OaLmptGSFeANSXN6r4CdGYtLh3s5Srf9++WTl+llMLEMfwbAHPSXt > > > > > > > > > NV7zoq8j1UwI444W9C4DnVNBiku1e42pQUFt3BtEg22mW/1RdhOHUsisxE3hyUtN > > > > > > > > > E2zCpu7Un5aedt5W72WozbAb0LPlUx/0fXyPLFNQmBMHeMVnxZb7CvraBo6BGHL4 > > > > > > > > > karbJBX2p+5s05/g8t5ljPbfakGNcUZRqbCk1neOQZYOiW8vI1FBbwGWiFWTISHQ > > > > > > > > > d+uj/eQTWiQsz4+e3PAVZ4ekDYAMS1HLLXaBwxr7MHRIHRVVKJI8mFbI9HfGKpPt > > > > > > > > > HDx+C47QkbQgPu1YL85g5mHkoP621r79zyGjW35HS2l4TCnUZ3q+WLvLMLpIsYcW > > > > > > > > > YNBshwOavdSYmk9lCSSCtilTjl1e0E4WOGtusJKpmkAphOkjFKttCE6Z0mSHenLP > > > > > > > > > numenORuE0/O7DgoihMrYzTTaRBkHLssIzfaPu96jcWjU9dhuxFW5AktUshr2RLw > > > > > > > > > EaWfWeQZ4Q== > > > > > > > > > =b8+3 > > > > > > > > > -----END PGP PUBLIC KEY BLOCK----- > > > > > > > > > > > > > > > > > > On Tue, Nov 10, 2015 at 6:37 AM, Stuart McCulloch < > > mccu...@gmail.com (mailto:mccu...@gmail.com) > > > > > (mailto:mccu...@gmail.com)> wrote: > > > > > > > > > > +1 verified with a couple of local projects, source release > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > looks > > > > > good > > > > > > > > > > > > > > > > > > > > Remember to add your public key to > > > > > http://www.apache.org/dist/felix/KEYS: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > http://felix.apache.org/documentation/development/release-management-nexus.html#appendix-a-create-and-add-your-key-to-httpwwwapacheorgdistfelixkeys > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > Cheers, Stuart > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Monday, 9 November 2015 at 11:44, Benson Margulies wrote: > > > > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > We solved 3 issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12333631&styleName=Text&projectId=12310100&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7C0a2bd62f03263e903089dc8019574717effb605c%7Clin > > > > > > > > > > > > > > > > > > > > > > There are still a couple of issues left in JIRA: > > https://issues.apache.org/jira/browse/FELIX-2322?jql=project%20%3D%20FELIX%20AND%20resolution%20%3D%20Unresolved%20AND%20component%20%3D%20%22Maven%20Bundle%20Plugin%22%20ORDER%20BY%20priority%20DESC > > > > > > > > > > > > > > > > > > > > > > Staging repo: > > > > > https://repository.apache.org/content/repositories/orgapachefelix-1104 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://repository.apache.org/service/local/repositories/orgapachefelix-1104/content/org/apache/felix/maven-bundle-plugin/3.0.1/maven-bundle-plugin-3.0.1-source-release.tar.gz > > > > > > > > > > > > > > > > > > > > > > Source release checksum(s): > > > > > > > > > > > [NAME-OF]-source-release.zip > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 08bac4ef6329c776b039a4cd28e7b6f4318aa3a3 > > > > > > > > > > > > > > > > > > > > > > Staging site: > > http://felix.apache.org/components/bundle-plugin-archives/bundle-plugin-LATEST/ > > > > > > > > > > > > > > > > > > > > > > Guide to testing staged releases: > > > > > http://maven.apache.org/guides/development/guide-testing-releases.html > > > > > > > > > > > > > > > > > > > > > > Vote open for 72 hours. > > > > > > > > > > > > > > > > > > > > > > [ ] +1 > > > > > > > > > > > [ ] +0 > > > > > > > > > > > [ ] -1 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >
