True, for a maven plugin I don't see why anyone would ever download it manually from the dist area.
Cheers, David On 13 November 2015 at 13:07, Benson Margulies <bimargul...@gmail.com> wrote: > There is no requirement to publish 'convenience binaries' in the dist > areas. For a maven plugin, they are not even convenient. They are not > forbidden, just not required. > > On Fri, Nov 13, 2015 at 7:31 AM, David Bosschaert > <david.bosscha...@gmail.com> wrote: >> Really? I think the downloads http://felix.apache.org/downloads.cgi >> points to the dist area so for that it also has to contain the >> binaries? >> >> David >> >> On 13 November 2015 at 12:07, Benson Margulies <bimargul...@gmail.com> wrote: >>> The only things in the dist area should be the source release zip, >>> it's detached signature file, and its md5 and sha1 files. >>> >>> On Fri, Nov 13, 2015 at 6:35 AM, Stuart McCulloch <mccu...@gmail.com> wrote: >>>> Those files are extraneous artifacts from old Maven releases (where >>>> everything got a checksum, even signature files) - this was fixed in >>>> https://issues.apache.org/jira/browse/MNG-5504 >>>> >>>> They aren’t exposed from the site download page, and don’t provide any >>>> extra security over the existing checksums/signatures of the primary files >>>> - so can be cleaned up for consistency >>>> >>>> On Friday, 13 November 2015 at 11:19, Pierre De Rop wrote: >>>> >>>>> I will try to do it, but before I have a question: >>>>> >>>>> it seems that there is a diff between the files currently committed in the >>>>> Felix release repository and this new release candidate: Indeed, in the >>>>> release repository, we currently have the following signatures files that >>>>> are not present in this new release candidate: >>>>> >>>>> from https://dist.apache.org/repos/dist/release/felix/: >>>>> >>>>> maven-bundle-plugin-3.0.0.jar.asc.md5 >>>>> maven-bundle-plugin-3.0.0.jar.asc.sha1 >>>>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.md5 >>>>> maven-bundle-plugin-3.0.0-javadoc.jar.asc.sha1 >>>>> maven-bundle-plugin-3.0.0.pom.asc.md5 >>>>> maven-bundle-plugin-3.0.0.pom.asc.sha1 >>>>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.md5 >>>>> maven-bundle-plugin-3.0.0-source-release.tar.gz.asc.sha1 >>>>> maven-bundle-plugin-3.0.0-source-release.zip.asc.md5 >>>>> maven-bundle-plugin-3.0.0-source-release.zip.asc.sha1 >>>>> maven-bundle-plugin-3.0.0-sources.jar.asc.md5 >>>>> maven-bundle-plugin-3.0.0-sources.jar.asc.sha1 >>>>> >>>>> I guess that in the previous release (currently in the felix release >>>>> repo), >>>>> the above files were not necessary. >>>>> I just would like that someone confirms this ? >>>>> >>>>> thanks; >>>>> >>>>> -> Pierre >>>>> >>>>> >>>>> >>>>> On Wed, Nov 11, 2015 at 7:41 PM, Benson Margulies <bimargul...@gmail.com >>>>> (mailto:bimargul...@gmail.com)> >>>>> wrote: >>>>> >>>>> > I'll send the announcement when I get word that someone has committed >>>>> > the release package to the dist area. >>>>> > >>>>> > >>>>> > On Wed, Nov 11, 2015 at 1:22 PM, Benson Margulies >>>>> > <bimargul...@gmail.com (mailto:bimargul...@gmail.com)> >>>>> > wrote: >>>>> > > Hi, the vote has passed with the following result: >>>>> > > >>>>> > > +1 (binding): >>>>> > > >>>>> > > Pierre De Rop >>>>> > > David Bosschaert >>>>> > > Stuart McCulloch >>>>> > > >>>>> > > +1 (not binding): >>>>> > > >>>>> > > Stefan Seifart, Jean-Baptiste Onofré, Jamie Goodyear. >>>>> > > >>>>> > > I will promote. PMC members, one of you has to put the source into the >>>>> > > distro area, I cannot. >>>>> > > >>>>> > > >>>>> > > >>>>> > > On Wed, Nov 11, 2015 at 1:14 PM, Pierre De Rop >>>>> > > <pierre.de...@gmail.com (mailto:pierre.de...@gmail.com)> >>>>> > wrote: >>>>> > > > Hello Benson, >>>>> > > > >>>>> > > > I was about to vote: +1 >>>>> > > > >>>>> > > > regards; >>>>> > > > /Pierre >>>>> > > > >>>>> > > > On Wed, Nov 11, 2015 at 7:12 PM, Benson Margulies < >>>>> > bimargul...@gmail.com (mailto:bimargul...@gmail.com)> >>>>> > > > wrote: >>>>> > > > >>>>> > > > > We are still one PMC vote short here. >>>>> > > > > >>>>> > > > > On Tue, Nov 10, 2015 at 7:13 PM, Jamie G. >>>>> > > > > <jamie.goody...@gmail.com (mailto:jamie.goody...@gmail.com)> >>>>> > > > > wrote: >>>>> > > > > > +1 (non-binding) >>>>> > > > > > >>>>> > > > > > On Tue, Nov 10, 2015 at 11:50 AM, Benson Margulies >>>>> > > > > > <bimargul...@gmail.com (mailto:bimargul...@gmail.com)> wrote: >>>>> > > > > > > Thank You. Perhaps I will change that doc page to mention >>>>> > > > > > > that a PMC >>>>> > > > > > > member might be required. >>>>> > > > > > > >>>>> > > > > > > On Tue, Nov 10, 2015 at 7:30 AM, Stuart McCulloch < >>>>> > mccu...@gmail.com (mailto:mccu...@gmail.com)> >>>>> > > > > wrote: >>>>> > > > > > > > No worries, I’ve just added your key and confirmed it >>>>> > > > > > > > matches the >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > >>>>> > > > >>>>> > > >>>>> > >>>>> > one >>>>> > > > > used to sign the artifacts >>>>> > > > > > > > >>>>> > > > > > > > On Tuesday, 10 November 2015 at 12:15, Benson Margulies >>>>> > > > > > > > wrote: >>>>> > > > > > > > >>>>> > > > > > > > > No can do with the signature. As a mere committer, I >>>>> > > > > > > > > can't commit >>>>> > to >>>>> > > > > > > > > the dist area. Only PMC members can do that. >>>>> > > > > > > > > >>>>> > > > > > > > > -----BEGIN PGP PUBLIC KEY BLOCK----- >>>>> > > > > > > > > Version: GnuPG v1 >>>>> > > > > > > > > >>>>> > > > > > > > > mQINBEzDDl0BEADHvJW2uff8vfxbfy0IvNOK4aytU+HVEvKEmuSqYEzC8i3BF6RT >>>>> > > > > > > > > LOxTeRFlu92rYz5ypD0mdNCzQaH0xbkcjialP6FpPCByrM9fFv6hmxZFSY71rvqz >>>>> > > > > > > > > Aw606I0t9rt94wc6p5Rl8NIso4rbFp2VQeu9hiydtyc5b6xh5mcCb2tYuihfByuL >>>>> > > > > > > > > ozt0ZWHDk1tZJk/XhSDVZ84jHrWRY2zSa2laIxH+KnJFto8BkTxQgrwEL1ipzoJr >>>>> > > > > > > > > n3DMIWOtWQR7hdSGWA/V+FgA4I7HXMXVrxolt5FesiWUXkZ7mVjglExv6Mwmf48V >>>>> > > > > > > > > TFfx46fz8vO6q93XQV705p2Csam78tvAMNYkJs2xZ9iaFIE8ET2cMgPie9yXlqTL >>>>> > > > > > > > > JGFRoFnTDM4HVW2hU6DsS7OAv0TjxZ94VPElrIrp7sK8MMe9+3qkTQkvUvLmbDOH >>>>> > > > > > > > > +i0LBw3ULKrod1oNe9VU8wyBBOaB5WqCfdjMWQoNb0IbgTXOyRRfO7YgA+KTtta1 >>>>> > > > > > > > > H91I8x15aW1ofnEjYDvrXmaScCVMJcaas/62XjlKlmwGJMcS69pVRlxdKGLjBDA4 >>>>> > > > > > > > > dg5gnZ+O/L792UwHOjuuqU3ix65xQ1t9Xrw5QsvTEhHLmbaJIrK9cT0UYvtUR/em >>>>> > > > > > > > > LJ7uVQOjL0PLnFGwntc0B0JldWT11oAtOV1rHgTrRn+HQzC6bTxx6eQlYQARAQAB >>>>> > > > > > > > > tClCZW5zb24gTWFyZ3VsaWVzIDxiaW1hcmd1bGllc0BhcGFjaGUub3JnPokCNwQT >>>>> > > > > > > > > AQoAIQUCTMMOXQIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRCcT36dmLHM >>>>> > > > > > > > > U2/KEACGKZVYVaSarUBdnZGpkgBEcdVxQulcPuAO6cK8omLesMJ365XFsFsWkDQY >>>>> > > > > > > > > TaOMsmoeuuhZw4IHf5M99BT0hPctdRAlrR5x2amWyOWrYUvutPVUrVFtC9W1tPn4 >>>>> > > > > > > > > VVf50r3hxrwIkNY5Ib7ynyCZL4N/4ExazvsRmKnu6KALvqcmyBZPal1MLaICo1k3 >>>>> > > > > > > > > wVJ8KCE84oja4BPgF4hDMrOh1JKEYtjaowCIJRZEZ29sBbkX1fEDl9c6Z78U37KT >>>>> > > > > > > > > 3asaPqS13CGsapQ99b9LrBVqXpbmZ+y3SwU+G8TU5RnitRUF9T9+JYD6jHgUM344 >>>>> > > > > > > > > qeAE8TMsd4C2n5cfEaAiwVuQ0u2ulxlw1VjUC3NaycSHcoPOehYdlD3IFE1QmwwA >>>>> > > > > > > > > XLbLVeCd27RxJ9+kLHsijdHUtwIaqmyC+qBXGof+NikpA+UHA1kgbW8MFgb1QRYN >>>>> > > > > > > > > DJWFQdIgB6H43pW7KxKT2fULYCUeOvt8nST+4X/YZwclAw5Cets2vtVcLvS5BdGz >>>>> > > > > > > > > +ANOyppjKH7DzWzYtnamMdS24i50zQu97vtaoijT3f4wW+dMP+mlusQ651+9rCcz >>>>> > > > > > > > > TXHYkHg9lKw9hy+jdphJPVTMH+QDkcJSsDFpi7k53iLHFcf2YwqK1BiYKoJXd6GH >>>>> > > > > > > > > FbjybE6c8nNfPywzhSKpM34UNY8EV/14sDonjBLQLnr4Z3NrWLkCDQRMww5dARAA >>>>> > > > > > > > > 9qZSA8fGWEppVjhJcJ7oFPzSeAEFeU0z/lASN6E6AaV75n63eQgx00s//2s+ty99 >>>>> > > > > > > > > tqp7a5giIhbSaH1EHQ71xBGalXBirWJnCf5/OkYIgoZUWovveNQHGANXjh6qKfwy >>>>> > > > > > > > > qe9SmWnMn28146LNXKxU/YO+UyYy1AC+0R/Woe5funUmv7db6q/y/+KC9Wbmue+M >>>>> > > > > > > > > HtAbFqDf07Gvp4rSNeSY97jki6dl9bfS5d/ofcvziBM4KCgalGaxTvYT6UI11i03 >>>>> > > > > > > > > YnW57WjtOstIZuJ1q1f8CC3OzTHRMwzoxLKmkfKXzEBxz9eM3fk3zYA6OTdSTOWl >>>>> > > > > > > > > 0akvAiPr2CW4pr3MvwHYw9wEAqWJwadQmBDCCLhRlOzqD4WIJA1C3y7vYtxI2OWf >>>>> > > > > > > > > wiUqtIantAr296vsamuhoiNXAG+GlpYaKasKLr/s7kHcdpH5oD2DkdVUiZHB2xs1 >>>>> > > > > > > > > ZjlgpafG71wHDiNKlJokJ4nZpQOoyDCXEdzr5uOz4fJ5Du4PUgG5y74Cu1JHZ0uJ >>>>> > > > > > > > > Le65D+MT2TmmiFeQHhT9Txdk2AVgf5uQjHDcIAvMI0niehT+l3zZ4YtRBviRksG4 >>>>> > > > > > > > > 349OecTu+33JoJGqtYnOcuPUR8HBB2dQrPK/l47SUg6esF5duznU4XkNskvbBWu3 >>>>> > > > > > > > > 2aiakTz7XiDm0TEzWtBS/hMRIeH4IyjNux8CwEJfV/MAEQEAAYkCHwQYAQoACQUC >>>>> > > > > > > > > TMMOXQIbDAAKCRCcT36dmLHMU2u/D/4umQeJcH06a2aM2ETXNVqDK29yti1tCSqs >>>>> > > > > > > > > 0jsZivZrK+O+oxqvTzcocYtQ2Fb8WjexGpQ41wN5zocH85cCPD+UisziV4r0NQYK >>>>> > > > > > > > > p1FhAJfkacIR4EtuEQrH2J7m4IDUXSqTW1jv36lXrAO/5ON07Wy3AROoJdFwrtO8 >>>>> > > > > > > > > ja0jX7Z+pe6OaLmptGSFeANSXN6r4CdGYtLh3s5Srf9++WTl+llMLEMfwbAHPSXt >>>>> > > > > > > > > NV7zoq8j1UwI444W9C4DnVNBiku1e42pQUFt3BtEg22mW/1RdhOHUsisxE3hyUtN >>>>> > > > > > > > > E2zCpu7Un5aedt5W72WozbAb0LPlUx/0fXyPLFNQmBMHeMVnxZb7CvraBo6BGHL4 >>>>> > > > > > > > > karbJBX2p+5s05/g8t5ljPbfakGNcUZRqbCk1neOQZYOiW8vI1FBbwGWiFWTISHQ >>>>> > > > > > > > > d+uj/eQTWiQsz4+e3PAVZ4ekDYAMS1HLLXaBwxr7MHRIHRVVKJI8mFbI9HfGKpPt >>>>> > > > > > > > > HDx+C47QkbQgPu1YL85g5mHkoP621r79zyGjW35HS2l4TCnUZ3q+WLvLMLpIsYcW >>>>> > > > > > > > > YNBshwOavdSYmk9lCSSCtilTjl1e0E4WOGtusJKpmkAphOkjFKttCE6Z0mSHenLP >>>>> > > > > > > > > numenORuE0/O7DgoihMrYzTTaRBkHLssIzfaPu96jcWjU9dhuxFW5AktUshr2RLw >>>>> > > > > > > > > EaWfWeQZ4Q== >>>>> > > > > > > > > =b8+3 >>>>> > > > > > > > > -----END PGP PUBLIC KEY BLOCK----- >>>>> > > > > > > > > >>>>> > > > > > > > > On Tue, Nov 10, 2015 at 6:37 AM, Stuart McCulloch < >>>>> > mccu...@gmail.com (mailto:mccu...@gmail.com) >>>>> > > > > (mailto:mccu...@gmail.com)> wrote: >>>>> > > > > > > > > > +1 verified with a couple of local projects, source >>>>> > > > > > > > > > release >>>>> > > > > > > > > >>>>> > > > > > > > >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > >>>>> > > > >>>>> > > >>>>> > >>>>> > looks >>>>> > > > > good >>>>> > > > > > > > > > >>>>> > > > > > > > > > Remember to add your public key to >>>>> > > > > http://www.apache.org/dist/felix/KEYS: >>>>> > > > > > > > > > >>>>> > > > > > > > > >>>>> > > > > > > > >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > >>>>> > > > >>>>> > > >>>>> > >>>>> > http://felix.apache.org/documentation/development/release-management-nexus.html#appendix-a-create-and-add-your-key-to-httpwwwapacheorgdistfelixkeys >>>>> > > > > > > > > > >>>>> > > > > > > > > > -- >>>>> > > > > > > > > > Cheers, Stuart >>>>> > > > > > > > > > >>>>> > > > > > > > > > >>>>> > > > > > > > > > On Monday, 9 November 2015 at 11:44, Benson Margulies >>>>> > > > > > > > > > wrote: >>>>> > > > > > > > > > >>>>> > > > > > > > > > > Hi, >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > We solved 3 issues: >>>>> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12333631&styleName=Text&projectId=12310100&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7C0a2bd62f03263e903089dc8019574717effb605c%7Clin >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > There are still a couple of issues left in JIRA: >>>>> > https://issues.apache.org/jira/browse/FELIX-2322?jql=project%20%3D%20FELIX%20AND%20resolution%20%3D%20Unresolved%20AND%20component%20%3D%20%22Maven%20Bundle%20Plugin%22%20ORDER%20BY%20priority%20DESC >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > Staging repo: >>>>> > > > > https://repository.apache.org/content/repositories/orgapachefelix-1104 >>>>> > > > > > > > > > > >>>>> > > > > > > > > > >>>>> > > > > > > > > >>>>> > > > > > > > >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > >>>>> > > > >>>>> > > >>>>> > >>>>> > https://repository.apache.org/service/local/repositories/orgapachefelix-1104/content/org/apache/felix/maven-bundle-plugin/3.0.1/maven-bundle-plugin-3.0.1-source-release.tar.gz >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > Source release checksum(s): >>>>> > > > > > > > > > > [NAME-OF]-source-release.zip >>>>> > > > > > > > > > > >>>>> > > > > > > > > > >>>>> > > > > > > > > >>>>> > > > > > > > >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > 08bac4ef6329c776b039a4cd28e7b6f4318aa3a3 >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > Staging site: >>>>> > http://felix.apache.org/components/bundle-plugin-archives/bundle-plugin-LATEST/ >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > Guide to testing staged releases: >>>>> > > > > http://maven.apache.org/guides/development/guide-testing-releases.html >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > Vote open for 72 hours. >>>>> > > > > > > > > > > >>>>> > > > > > > > > > > [ ] +1 >>>>> > > > > > > > > > > [ ] +0 >>>>> > > > > > > > > > > [ ] -1 >>>>> > > > > > > > > > > >>>>> > > > > > > > > > >>>>> > > > > > > > > >>>>> > > > > > > > >>>>> > > > > > > >>>>> > > > > > >>>>> > > > > >>>>> > > > > >>>>> > > > >>>>> > > >>>>> > >>>>> > >>>>> >>>>> >>>>> >>>> >>>>
