Ah yes, thanks Paul for the reminder. I completely forgot that I had to import those keys and I've changed laptops recently.
Now they're all good for me too. +1 from me. David On Mon, 27 Jul 2026 at 12:49, Paul Rütter <[email protected]> wrote: > Hi David, > > Thanks for checking, for me the output is as follows: > > > ################################################################################ > CHECK SIGNATURES AND DIGESTS > > ################################################################################ > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/index.html.tmp > gpg: ---- > md5: ---- > sha1: ---- > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-javadoc.jar > gpg: GOOD > md5: GOOD > sha1: GOOD > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz > gpg: GOOD > md5: GOOD > sha1: GOOD > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz.sha512 > gpg: ---- > md5: ---- > sha1: ---- > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.zip > gpg: GOOD > md5: GOOD > sha1: GOOD > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-source-release.zip.sha512 > gpg: ---- > md5: ---- > sha1: ---- > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0-sources.jar > gpg: GOOD > md5: GOOD > sha1: GOOD > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0.jar > gpg: GOOD > md5: GOOD > sha1: GOOD > > C:\tmp\release-felix\tmprelease-felix\1551\org\apache\felix\maven-bundle-plugin\6.1.0/maven-bundle-plugin-6.1.0.pom > gpg: GOOD > md5: GOOD > sha1: GOOD > > ################################################################################ > > Could you try and reimport the gpg keys from > http://www.apache.org/dist/felix/KEYS via gpg --import KEYS? > > On Mon, Jul 27, 2026 at 1:35 PM <[email protected]> wrote: > > > Hi Paul, > > > > When I run the check_staged_release.sh script, I do get all these gpg > > errors... > > > > Maybe it's not new, but it doesn't look good... > > > > Kind regards, > > > > David > > > > > > > ################################################################################ > > CHECK SIGNATURES AND DIGESTS > > > > > > > ################################################################################ > > mbp-610/1551/org/apache/felix/index.html.tmp > > gpg: ---- > > md5: ---- > > sha1: ---- > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/index.html.tmp > > gpg: ---- > > md5: ---- > > sha1: ---- > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/maven-metadata.xml > > gpg: ---- > > md5: GOOD > > sha1: GOOD > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/index.html.tmp > > gpg: ---- > > md5: ---- > > sha1: ---- > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz.sha512 > > gpg: ---- > > md5: ---- > > sha1: ---- > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.tar.gz > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.zip > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0.jar > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-sources.jar > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-javadoc.jar > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0-source-release.zip.sha512 > > gpg: ---- > > md5: ---- > > sha1: ---- > > > > > mbp-610/1551/org/apache/felix/maven-bundle-plugin/6.1.0/maven-bundle-plugin-6.1.0.pom > > gpg: BAD!!!!!!!! > > md5: GOOD > > sha1: GOOD > > mbp-610/1551/org/apache/felix/maven-metadata.xml > > gpg: ---- > > md5: GOOD > > sha1: GOOD > > > > > ################################################################################ > > > > On Mon, 27 Jul 2026 at 12:24, Paul Rütter <[email protected]> wrote: > > > > > Hi, > > > > > > We solved 1 issue in this release. This updates the Maven Bundle Plugin > > to > > > include bndlib 7.3.0 (was 7.0.0), among other dependency upgrades > (Maven > > > 3.x). > > > > > > - FELIX-6741 Upgrade dependencies for maven-bundle-plugin > > > > > > Staging repositories: > > > > > > https://repository.apache.org/content/repositories/orgapachefelix-1551 > > > > > > You can use this UNIX script to download the release and verify the > > > signatures: > > > > https://github.com/apache/felix-dev/blob/master/check_staged_release.sh > > > > > > Usage: > > > sh check_staged_release.sh 1551 /tmp/felix-staging > > > > > > Please vote to approve this release: > > > > > > [ ] +1 Approve the release > > > [ ] -1 Veto the release (please provide specific comments) > > > > > > This vote will be open for 72 hours. > > > > > > Regards, > > > Paul > > > > > > > > -- > Paul Rütter | Tech Lead | BlueConic | Wijchenseweg 101, 6538 SW | Nijmegen, > The Netherlands | www.blueconic.com >
