+1
On Tue, Apr 22, 2014 at 5:48 AM, Mike Kienenberger <mkien...@gmail.com>wrote:
> - signatures and checksums match
> - source builds
> - apache rat passes
>
> +1
>
>
> Below are the linux commands I used to verify the release of the
> myfaces-core-assembly-2.2.3-src files:
>
> =============================================
>
> # check checksums
> find . -name '*.md5' -exec cat {} \; -printf ' %f\n' | sed
> 's|\.md5$||' | md5sum -c
> find . -name '*.sha1' -exec cat {} \; -printf ' %f\n' | sed
> 's|\.sha1$||' | sha1sum -c
>
> # check signatures
> wget http://www.apache.org/dist/myfaces/KEYS
> gpg --import KEYS
> find . -name '*.asc' -exec gpg --verify {} \;
>
> # verify tar.gz and zip sources are identical
> mkdir src
> cd src
> tar xvf ../myfaces-core-assembly-2.2.3-src.tar.gz
> mv myfaces-core-2.2.3-src/ myfaces-core-2.2.3-src-tar-gz
> unzip ../myfaces-core-assembly-2.2.3-src.zip
> # should be no output
> diff -rq myfaces-core-2.2.3-src*
> # should be "are identical" output
> diff -srq myfaces-core-2.2.3-src*
>
> # build source
> cd myfaces-core-2.2.3-src/src
> find \( -name '*.jar' -o -name '*.zip' \) -exec unzip -n {} \;
> cd myfaces-core-module-2.2.3/
> mvn install
>
> mvn apache-rat:check
> # To check for all errors, if more than one project is affected
> # mvn apache-rat:check -Drat.numUnapprovedLicenses=9999
> # To see details of rat failure, including location of rat report
> # mvn -e -X apache-rat:check
>
> On Tue, Apr 22, 2014 at 6:20 AM, Leonardo Uribe <lu4...@gmail.com> wrote:
> > +1
> >
> > 2014-04-22 12:20 GMT+02:00 Leonardo Uribe <lu4...@gmail.com>:
> >> Hi,
> >>
> >> I was running the needed tasks to get the 2.2.3 release of Apache
> >> MyFaces core out.
> >>
> >> The artifacts passed the TCK test of Feb 2013
> (jsftck-2.2_26-Feb-2013.zip).
> >>
> >> Please note that this vote concerns all of the following parts:
> >> 1. Maven artifact group "org.apache.myfaces.shared" v4.2.2 [1]
> >> 2. Maven artifact group "org.apache.myfaces.core" v2.2.3 [1]
> >>
> >> The artifacts were deployed on nexus repo [1] and to my private
> >> Apache account [3] for binary and source packages.
> >>
> >> The release notes could be found at [4].
> >>
> >> Also the clirr test does not show binary incompatibilities with
> myfaces-api.
> >>
> >> Please take a look at the "2.2.3" artifacts and vote!
> >>
> >> Please note: This vote is "majority approval" with a minimum of three
> >> +1 votes (see [3]).
> >>
> >> ------------------------------------------------
> >> [ ] +1 for community members who have reviewed the bits
> >> [ ] +0
> >> [ ] -1 for fatal flaws that should cause these bits not to be released,
> >> and why..............
> >> ------------------------------------------------
> >>
> >> Thanks,
> >> Leonardo Uribe
> >>
> >> [1]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1021/org/apache/myfaces/
> >>
> https://repository.apache.org/content/repositories/orgapachemyfaces-1020/org/apache/myfaces/
> >> [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
> >> [3] http://people.apache.org/~lu4242/myfaces223binsrc
> >> [4]
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&version=12326543
>
--
Grant Smith - V.P. Information Technology
Marathon Computer Systems, LLC.
