+1 manually checked the licenses here too
./rcverify.sh openwhisk-runtime-nodejs 1.23.0 rc1 rcverify.sh (script SHA1: 6DC9 462D 3035 5FD0 ADE6 9EF9 D0DF 1A25 13E1 5CFD) working in the following directory: /var/folders/b7/f7jgzjn11m3fglrnltk37cxr0000gp/T/tmp.qa0RUEx3fJ fetching tarball and signatures from https://dist.apache.org/repos/dist/dev/openwhisk/rc1 fetching openwhisk-runtime-nodejs-1.23.0-sources.tar.gz... ok fetching openwhisk-runtime-nodejs-1.23.0-sources.tar.gz.asc... ok fetching openwhisk-runtime-nodejs-1.23.0-sources.tar.gz.sha512... ok fetching apache license... ok fetching release keys... ok importing keys... ok (keys already imported (processed 14 unchanged 14)) unpacking tar ball... ok cloning scancode... ok computing sha512 for openwhisk-runtime-nodejs-1.23.0-sources.tar.gz... ok openwhisk-runtime-nodejs-1.23.0-sources.tar.gz: 8FA2704D AED81B83 32FC4B52 4CE06044 CC836269 691B7E80 A8F5CA1B C598EBA8 CE23DCC3 F43892AD A86E2520 559A8FC0 E32BA009 0CB20250 F99D4269 39A85D09 validating sha512... passed verifying asc... passed (signed-by: Dave Grove <dgr...@apache.org>) verifying notice... passed verifying absence of DISCLAIMER.txt passed verifying license...cmp: EOF on /var/folders/b7/f7jgzjn11m3fglrnltk37cxr0000gp/T/tmp.qa0RUEx3fJ/LICENSE-2.0 failed (cmp -n 11358 '/var/folders/b7/f7jgzjn11m3fglrnltk37cxr0000gp/T/tmp.qa0RUEx3fJ/LICENSE-2.0' '/var/folders/b7/f7jgzjn11m3fglrnltk37cxr0000gp/T/tmp.qa0RUEx3fJ/openwhisk-runtime-nodejs-1.23.0/LICENSE.txt') verifying sources have proper headers... passed scanning for executable files... passed scanning for unexpected file types... passed scanning for archives... passed scanning for packages... passed scanning package.json for version match... passed (none detected) scanning package-lock.json for version match... passed (none detected) run the following command to remove the scratch space: rm -rf '/var/folders/b7/f7jgzjn11m3fglrnltk37cxr0000gp/T/tmp.qa0RUEx3fJ' On Tue, Sep 3, 2024 at 1:18 PM David Grove <gro...@us.ibm.com> wrote: > Hi, > > This is a call to vote on releasing version 1.23.0 release candidate rc1 > of the following project module with artifacts built from the Git > repositories and commit IDs listed below. > > * OpenWhisk Runtime Node.js: c51a0a6b6dbeb98bb05a570129fbf32c9062ee65 > > https://github.com/apache/openwhisk-runtime-nodejs/commit/c51a0a6b6dbeb98bb05a570129fbf32c9062ee65 > > https://dist.apache.org/repos/dist/dev/openwhisk/rc1/openwhisk-runtime-nodejs-1.23.0-sources.tar.gz > > https://dist.apache.org/repos/dist/dev/openwhisk/rc1/openwhisk-runtime-nodejs-1.23.0-sources.tar.gz.asc > > https://dist.apache.org/repos/dist/dev/openwhisk/rc1/openwhisk-runtime-nodejs-1.23.0-sources.tar.gz.sha512 > > This release is comprised of source code distribution only. > > You can use this UNIX script to download the release and verify the > checklist below: > https://github.com/apache/openwhisk-release/blob/1f9463f/tools/rcverify.sh > > Usage: > curl -s " > https://raw.githubusercontent.com/apache/openwhisk-release/1f9463f/tools/rcverify.sh" > -o rcverify.sh > chmod +x rcverify.sh > ./rcverify.sh openwhisk-runtime-nodejs 1.23.0 rc1 > > Please vote to approve this release: > > [ ] +1 Approve the release > [ ] 0 Don't care > [ ] -1 Don't release, because ... > > Release verification checklist for reference: > [ ] Download links are valid. > [ ] Checksums and PGP signatures are valid. > [ ] Source code artifacts have correct names matching the current > release. > [ ] LICENSE and NOTICE files are correct for each OpenWhisk repository. > [ ] All files have license headers as specified by OpenWhisk project > policy [1]. > [ ] No compiled archives bundled in source archive. > > This majority vote is open for at least 72 hours. > > > [1] > https://github.com/apache/openwhisk-release/blob/master/docs/license_compliance.md > >