-1 for Apache Geode 2.0.3.RC1. Environment:
Linux amd64 Amazon Corretto JDK 17.0.20 Gradle 7.3.3 from the source distribution Checks performed: PASS: - SHA-256 checksums passed for all five archives: Geode source, Geode binary, Geode examples, Geode native, and Geode benchmarks. - All archives were readable. - All source archives contained top-level LICENSE and NOTICE files. - No compiled binaries were found in the source archives. - Source contents were compared with the four rel/v2.0.3.RC1 tags. - The Geode source revision, binary revision, and tag all resolve to 551d1748c50e620111b566ed69ffe7bf8fe67184. - Apache RAT passed. - The Maven staging repository contains the expected 2.0.3 modules. - A representative Maven artifact, geode-core-2.0.3.jar, passed its SHA-256 check. - The binary smoke test passed. I started a locator and server, created a replicated region, performed put and get successfully, destroyed the region, and stopped the server and locator cleanly. BLOCKERS: 1. The release signing key is missing from Geode's KEYS file[1]. All distribution archives, the Maven artifact I checked, and the rel/v2.0.3.RC1 tag are signed with: 5C3DA8FBB1052F4DF1DEB1EF62F7DA41B7D8F26C Apache policy requires release-signing keys to be published in the project's KEYS file: https://infra.apache.org/release-distribution.html#the-keys-file Geode's published KEYS file: https://downloads.apache.org/geode/KEYS This key is not present in either the linked repository KEYS file or the canonical Geode distribution KEYS file. Importing the published KEYS file results in: gpg: Can't check signature: No public key 2. The source distribution does not complete ./gradlew build. The build reached compilation, tests, RAT, assembly, and report aggregation, but failed after 597 tasks with: Execution failed for task ':geode-assembly:srcDistTar'. Entry apache-geode-2.0.3-build.0-src/.buildinfo is a duplicate but no duplicate handling strategy has been set. The distributed source already contains .buildinfo, while srcDistTar attempts to add it again. 3. The release-manager-provided examples command fails. The exact build runAll command aborts during :async:start: deploy --jar=build/libs/async.jar build/libs/async.jar not found. Instead, the async JAR is generated with this literal filename: task ':async:jar' property 'archiveBaseName'.task ':async:jar' property 'archiveExtension' The example therefore left the locator and two servers running; I shut them down manually after the failure. The release-notes link is valid and contains the 2.0.3 section. Because the signatures cannot be verified using the project's published KEYS file, the source distribution cannot complete its normal build, and the supplied examples validation fails, I vote -1 and recommend an RC2. Sai [1] [2] https://infra.apache.org/release-distribution.html#the-keys-file On Mon, 7 Sept 2026 at 08:12, Jinwoo Hwang via dev <[email protected]> wrote: > Hello Geode Dev Community, > > This is a release candidate for Apache Geode version 2.0.3.RC1. > Thanks to all the community members for their contributions to this > release! > > Please do a review and give your feedback, including the checks you > performed. > > Voting deadline: > 3PM PST Sat, September 12 2026. > > Please note that we are voting upon the source tag: > rel/v2.0.3.RC1 > > Release notes: > > https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-2.0.3 > > Source and binary distributions: > https://dist.apache.org/repos/dist/dev/geode/2.0.3.RC1/ > > Maven staging repo: > https://repository.apache.org/content/repositories/orgapachegeode-1154/ > > GitHub: > https://github.com/apache/geode/tree/rel/v2.0.3.RC1 > https://github.com/apache/geode-examples/tree/rel/v2.0.3.RC1 > https://github.com/apache/geode-native/tree/rel/v2.0.3.RC1 > https://github.com/apache/geode-benchmarks/tree/rel/v2.0.3.RC1 > > Geode's KEYS file containing PGP keys we use to sign the release: > https://github.com/apache/geode/blob/develop/KEYS > > Command to run geode-examples: > ./gradlew -PgeodeReleaseUrl= > https://dist.apache.org/repos/dist/dev/geode/2.0.3.RC1 > -PgeodeRepositoryUrl= > https://repository.apache.org/content/repositories/orgapachegeode-1154 > build runAll > > Best regards, > Jinwoo Hwang (he/him/his) > Apache Geode / SAS® Research and Development > http://JinwooHwang.com<http://jinwoohwang.com/> >
