Hi Kalyan, Why do we vote on source + bin distributions that are copied to a local directory, when they are available in maven here?
https://repository.apache.org/content/repositories/orgapachesentry-1005/org/apache/sentry/sentry-dist/2.0.0/ I found a minor problem in that some test dependencies in Sentry are not declared at test scope, meaning that 5 extra jars are copied to the distribution lib directory: https://issues.apache.org/jira/browse/SENTRY-2076 I'm not sure if this is a blocker or not for this release. I have two further concerns: a) We are shipping lots of duplicate jars in the lib directory with different versions, e.g. Jetty 6 and 9 jars, three different metrics versions, etc. Surely all these different versions must be causing some conflicts when using the Sentry distribution? b) We are shipping a *lot* of jars but have very little license information. Surely a lot of the jars we are shipping are not Apache licensed, and must therefore have the license referenced in the LICENSE file? Colm. On Wed, Nov 29, 2017 at 12:38 AM, Kalyan Kumar Kalvagadda < kkal...@cloudera.com> wrote: > This is the release of Apache Sentry, version 2.0.0. > > It fixes the following issues: > *https://issues.apache.org/jira/projects/SENTRY/versions/12341081 > <https://issues.apache.org/jira/projects/SENTRY/versions/12341081>* > > Source and bin files : > *http://home.apache.org/~kalyan/apache-sentry-2.0.0-src-rc-1/ > <http://home.apache.org/~kalyan/apache-sentry-2.0.0-src-rc-1/>* > > Maven artifacts are available > here:https://repository.apache.org/content/repositories/orgapachesentry- > 1005/ > > > Tag to be voted on > *https://git-wip-us.apache.org/repos/asf/sentry/?p= > sentry.git;a=tag;h=refs/tags/release-2.0.0 > <https://git-wip-us.apache.org/repos/asf/sentry/?p= > sentry.git;a=tag;h=refs/tags/release-2.0.0>* > > Sentry's KEYS containing the PGP key we used to sign the release: > http://www.apache.org/dist/sentry/KEYS > > we are voting on the source:tag=release-2.0.0, SHA= > 18fe7c596fa1ffad3e656a42d534ac190876b642 > (You can get the hash of the tag by doing "git rev-list release-1.8.0 | > head -n 1" ) > > Vote will be open for 72 hours. > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove (and reason why) > > -Kalyan > -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
