I *can* but this is something we want to avoid. We want a process as automated as possible. As far as I understand, after discussing it at Devoxx France with other guys from Apache, other projects do this too. I don't like very much the idea of sending my private key to the CI server so that it can sign our artifacts. If we have to do this additional signing, then we will, but it means releases cannot be automated, which is again a PITA. The less manual work is involved, the less error prone the release process is.
2015-06-08 0:31 GMT+02:00 Roman Shaposhnik <[email protected]>: > Cédric, could you please add your personal KEY to the KEYS > and re-sign with that? > > Thanks, > Roman. > > On Sun, Jun 7, 2015 at 8:48 AM, Cédric Champeau > <[email protected]> wrote: > > Dear community, > > > > I am happy to start the first VOTE thread for a Groovy release under the > > Apache Incubator umbrella! > > This release both includes a lot of bugfixes, but also required some > > adjustments for the sake of conforming to the Apache Software Foundation > and > > Apache Incubator guidelines. A big thank to all who contributed and > helped > > us! > > > > The changelog for this release can be found here: > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318123&version=12331941 > > > > Tag for the release: > > > https://git1-us-west.apache.org/repos/asf?p=incubator-groovy.git;a=tag;h=19f70958f39f0cc5c6b4d3e9471fd297400647d2 > > > > The artifacts to be voted on are located here: > > http://people.apache.org/~cchampeau/groovy/ > > > > Release artifacts are signed with the following keys: > > http://people.apache.org/~cchampeau/groovy/KEYS > > > > It is expected that voters check at least checksums and signatures, and > of > > course much better if you can also verify the source package. > > > > Please vote on releasing this package as Apache Groovy 2.4.4-incubating. > > > > The vote is open for the next 72 hours and passes if a majority of at > least > > three +1 PPMC votes are cast. > > > > [ ] +1 Release Apache Groovy 2.4.4-incubating > > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > > [ ] -1 Do not release Apache Groovy 2.4.4-incubating because... > > > > Here is my vote: > > > > +1 (binding) > > >
