Hi David,
Thanks for checking, for me the output is as follows:
################################################################################
CHECK SIGNATURES AND DIGESTS
################################################################################
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/index.html.tmp
gpg: ----
md5: ----
sha1: ----
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-javadoc.jar
gpg: GOOD
md5: GOOD
sha1: GOOD
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz
gpg: GOOD
md5: GOOD
sha1: GOOD
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz.sha512
gpg: ----
md5: ----
sha1: ----
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.zip
gpg: GOOD
md5: GOOD
sha1: GOOD
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.zip.sha512
gpg: ----
md5: ----
sha1: ----
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-sources.jar
gpg: GOOD
md5: GOOD
sha1: GOOD
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0.jar
gpg: GOOD
md5: GOOD
sha1: GOOD
C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0.pom
gpg: GOOD
md5: GOOD
sha1: GOOD
################################################################################
Could you try and reimport the gpg keys from
http://www.apache.org/dist/felix/KEYS via gpg --import KEYS?
On Mon, Jul 27, 2026 at 1:35 PM <[email protected]> wrote:
> Hi Paul,
>
> When I run the check_staged_release.sh script, I do get all these gpg
> errors...
>
> Maybe it's not new, but it doesn't look good...
>
> Kind regards,
>
> David
>
>
> ################################################################################
> CHECK SIGNATURES AND DIGESTS
>
>
> ################################################################################
> mbp-610/1551/org/apache/felix/index.html.tmp
> gpg: ----
> md5: ----
> sha1: ----
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/index.html.tmp
> gpg: ----
> md5: ----
> sha1: ----
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/maven-metadata.xml
> gpg: ----
> md5: GOOD
> sha1: GOOD
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/index.html.tmp
> gpg: ----
> md5: ----
> sha1: ----
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz.sha512
> gpg: ----
> md5: ----
> sha1: ----
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.zip
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0.jar
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-sources.jar
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-javadoc.jar
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.zip.sha512
> gpg: ----
> md5: ----
> sha1: ----
>
> mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0.pom
> gpg: BAD!!!!!!!!
> md5: GOOD
> sha1: GOOD
> mbp-610/1551/org/apache/felix/maven-metadata.xml
> gpg: ----
> md5: GOOD
> sha1: GOOD
>
> ################################################################################
>
> On Mon, 27 Jul 2026 at 12:24, Paul Rütter <[email protected]> wrote:
>
> > Hi,
> >
> > We solved 1 issue in this release. This updates the Maven Bundle Plugin
> to
> > include bndlib 7.3.0 (was 7.0.0), among other dependency upgrades (Maven
> > 3.x).
> >
> > - FELIX-6741 Upgrade dependencies for maven-bundle-plugin
> >
> > Staging repositories:
> >
> > https://repository.apache.org/content/repositories/orgapachefelix-1551
> >
> > You can use this UNIX script to download the release and verify the
> > signatures:
> > https://github.com/apache/felix-dev/blob/master/check_staged_release.sh
> >
> > Usage:
> > sh check_staged_release.sh 1551 /tmp/felix-staging
> >
> > Please vote to approve this release:
> >
> > [ ] +1 Approve the release
> > [ ] -1 Veto the release (please provide specific comments)
> >
> > This vote will be open for 72 hours.
> >
> > Regards,
> > Paul
> >
>
--
Paul Rütter | Tech Lead | BlueConic | Wijchenseweg 101, 6538 SW | Nijmegen,
The Netherlands | www.blueconic.com
