+1 (pending KEYS fix) Verified the source release: - sha512 and the OpenPGP signature are good; LICENSE/NOTICE present. - Built the full reactor from source with JDK 17 — unit tests pass (1142 tests, 0 failures / 0 errors).
One thing blocks independent verification: your signing key (Alex O'Ree, 98AD2E19BFF4106D) isn't in the published KEYS — it's absent from dist/release/jspwiki/KE 1 new message (ctrl+End) ↓ ache.org), and the only copy on the public keyservers is the expired one. The signature only verifies against the KEYS bundled inside the release zip, which can't Arturo On Sun, Aug 16, 2026 at 9:32 PM Alex O'Ree <[email protected]> wrote: > This is a release vote for Apache JSPWiki, version 3.0.0 RC2 The vote will > be open for at least 72 hours from now. > > It fixes the following issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310732&version=3.0.0 > > Deltas from the previous RC > - Multiple security issues patched > - The minor issues reported with the previous RC1 should also be fixed > > You can see a curated changelog at > https://jspwiki-wiki.apache.org/Wiki.jsp?page=NewIn3.0.0 > Although according to the release procedure, this is updated after the > release is voted on and approved. > > Note that we are voting upon the source (tag), binaries are provided for > convenience. > > Everybody is encouraged to vote. > > Source and binary files: > https://dist.apache.org/repos/dist/dev/jspwiki/3.0.0-RC2 > > Nexus staging repo: > https://repository.apache.org/content/repositories/orgapachejspwiki-1038 > > The tag to be voted upon: > https://github.com/apache/jspwiki/tree/3.0.0-RC2 > > JSPWiki's KEYS file containing PGP keys we use to sign the release: > https://www.apache.org/dist/jspwiki/KEYS > > == Reproducible Builds == > JSPWiki should follow Reproducible Builds ( > https://reproducible-builds.org/). > In order to verify > artifacts' build reproducibility, please use > > mvn verify artifact:compare -Dreference.repo= > https://repository.apache.org/content/repositories/staging/ > > *** Please download, test and vote: > > [ ] +1 Approve the release > [ ] 0 Don't mind > [ ] -1 Disapprove the release (please provide specific comments) > > +1 from me > > (PS expect another vote for 2.x shortly) >
