+1 (binding)
Checked signatures, NOTICE, LICENSE look ok to me. Quick look at sources
looks good.
For those using linux, the script below may speed up verification.
Cheers,
Antonio
[1]
sh script.sh
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-maven-utilities/nbm-maven-plugin/nbm-maven-plugin-4.8/nbm-maven-plugin-4.8-source-release.zip
---
#!/usr/bin/env sh
if [ $# -ne 1 ]; then
echo "Usage: verify-signature URL"
echo " Verifies that URL is signed properly with URL.asc and
URL.sha512"
exit 1
fi
FILE=`basename $1`
echo "Verifying signatures of $FILE"
CURL=`which curl`
if [ "X" = "X$CURL" ]; then
echo "curl not found on path. Please install it."
exit 2
fi
SHA512=`which sha512sum`
if [ "X" = "X$SHA512" ]; then
echo "sha512sum not found on path. Please install it."
exit 2
fi
echo "Downloading $1 ..."
$CURL -s $1 -o $FILE
if [ $? -ne 0 ]; then
echo "Could not download $1"
exit 3
fi
echo "Downloading $1.asc ..."
$CURL -s "$1.asc" -o $FILE.asc
if [ $? -ne 0 ]; then
echo "Could not download $1.asc"
exit 4
fi
echo "Downloading $1.sha512 ..."
$CURL -s "$1.sha512" -o $FILE.sha512
if [ $? -ne 0 ]; then
echo "Could not download $1.sha512"
exit 5
fi
RESULT_SHA=`$SHA512 $FILE`
EXPECTED_SHA=`cat $FILE.sha512`
if [ "X$EXPECTED_SHA" != "X$RESULT_SHA" ]; then
echo "SHA512 sums fail"
echo "RESULT : $RESULT_SHA"
echo "EXPECTED: $EXPECTED_SHA"
exit 6
else
echo "*** ***"
echo "*** SHA512 sum matches. ***"
echo "*** ***"
fi
gpg --verify $FILE.asc $FILE
if [ $? -ne 0 ]; then
echo "PGP signature check failed."
exit 7
else
echo "*** ***"
echo "*** PGP signature is ok. ***"
echo "*** ***"
fi
---
El 3/6/22 a las 18:49, Eric Barboni escribió:
Thanks a very last PMC vote and this one could be closed.
Eric
-----Message d'origine-----
De : Michael Bien <>
Envoyé : jeudi 2 juin 2022 14:47
À : [email protected]; Eric Barboni <[email protected]>
Objet : Re: [VOTE] Release of Apache NetBeans utilities (nbm-maven-plugin 4.8
and nb-repository 1.7)
+1 (binding)
- i haven't tested it, but looking through the PRs you linked (for #1) its
unlikely that they break anything, they are minor updates
- #1, #2 builds fine with JDK 18 (mvn clean verify)
- both sigs OK
best regards,
-mbien
On 02.06.22 13:17, Eric Barboni wrote:
+1 (binding)
I need 2 more bindings vote
Best Regards
Eric
-----Message d'origine-----
De : Eric Barboni <>
Envoyé : mardi 31 mai 2022 18:56
À : [email protected]
Objet : [VOTE] Release of Apache NetBeans utilities (nbm-maven-plugin
4.8 and nb-repository 1.7)
Hi folks
I would like to release the final artefacts for the Apache NetBeans
utilities.
### 1
nbm-maven-plugin 4.8
-- Main changes
Add tsaurl and tsacert options when signing nbms by Andrew Scott
Gardner
https://github.com/apache/netbeans-mavenutils-nbm-maven-plugin/pull/21
Include runtime module libraries Axel Hauschulte (as an option)
https://github.com/apache/netbeans-mavenutils-nbm-maven-plugin/pull/28
A bit of dependencies changes.
Integration Test are ok
Artefacts:
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-maven-utiliti
es/nbm
-maven-plugin/nbm-maven-plugin-4.8/
Sha512
4d8fb07d052059fd348a17ff20739f5a36289fba569969b6bfdf74a0f576e322cf1b3a
54b854
dd0f04ebcad0be1cadee6c58bb483ab350e8399888b0b5dcd613
In addition to that, artefacts build from
https://github.com/apache/netbeans-mavenutils-nbm-maven-plugin commit
id
(3c03efecae0fb3c4b146de77bf65fe121fd00b30 tag nbm-maven-plugin-4.8)
are staged in [1]
### 2
This plugin is used to get the Apache NetBeans artefacts ready for
maven central. It's been a long time since release (2020).
We changed the way we look to external dependencies to get the one
from maven central if sha1 match.
A bit of dependencies changes.
Integration Test are ko but the goal associated is no more available
(forget they where it but too lazy to respin).
Artefacts
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-maven-utiliti
es/nb- repository-plugin/nb-repository-plugin-1.7/
Sha512
7ff78a88a2364d358c83664b3b2e69689f6a7fc5f47ff9b7a85ecfe0cd448688df9c1e
bbf515
c2e5a2c9695c358be2539fa93c72e0e5438f7b087beac74c8bc6
In addition to that, artefacts build from
https://github.com/apache/netbeans-mavenutils-nb-repository-plugin
commit id
(68f94faa4ad38aabc44e1a3f53245f60ab0069e4 tag
nb-repository-plugin-1.7) are staged in [1]
Key file is here:
https://www.apache.org/dist/netbeans/KEYS
The vote is open for at least 72h.
Best Regards
Eric
[1]
https://repository.apache.org/content/repositories/orgapachenetbeans-1
113
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
