Indeed step 4 can only be done by a PMC. Also your other suggestions seem reasonable. Can you come up with a PR to clarify the steps in https://github.com/apache/sling-site/blob/master/src/main/jbake/content/documentation/development/release-management.md <https://github.com/apache/sling-site/blob/master/src/main/jbake/content/documentation/development/release-management.md>?
Thanks, Konrad > On 19. Oct 2020, at 16:30, Cris Rockwell <[email protected]> wrote: > > Hi Konrad and Robert > > Thanks for the info. I added my fingerprint to my Apache ID Friday morning. > Seems that it could take a few days to update, but my key is now in the list > https://people.apache.org/keys/group/sling.asc > > But my key is not included here > https://downloads.apache.org/sling/KEYS > > > As far the docs go. I have a two suggestions > > Swap step 2 with step 3. Step 2.3 says “you are DONE” but there are more > steps. I think it may be important to have the public key uploaded to a key > server before updating the Apache ID with the key fingerprint. > > Regarding Step 4. I tried updating KEYS, but don’t have access to commit > changes. Is it likely that somebody has access to edit KEYS, and also needs > to add their own public key? From an on-boarding perspective, I think most > new committers won’t be able to edit KEYS. If it's a step that should be > performed by another committer, then the docs could reflect that by > indicating the role of the person in charge of step #4 > > Thanks > Cris > > >> On Oct 19, 2020, at 3:33 AM, Konrad Windszus <[email protected]> wrote: >> >> Hi Cris and Robert, >> >> after doing those steps you still need to manually add your key to the keys >> file as outlined in https://issues.apache.org/jira/browse/SLING-9173 >> <https://issues.apache.org/jira/browse/SLING-9173><https://issues.apache.org/jira/browse/SLING-9173 >> <https://issues.apache.org/jira/browse/SLING-9173>>. >> It is not generated automatically! >> >> We still need to update >> https://sling.apache.org/documentation/development/release-management.html >> <https://sling.apache.org/documentation/development/release-management.html> >> <https://sling.apache.org/documentation/development/release-management.html >> <https://sling.apache.org/documentation/development/release-management.html>> >> to reflect that. >> >> Thanks, >> Konrad >> >>> On 19. Oct 2020, at 09:30, Robert Munteanu <[email protected] >>> <mailto:[email protected]>> wrote: >>> >>> Hi Cris, >>> >>> On Fri, 2020-10-16 at 12:24 -0400, Cris Rockwell wrote: >>>> Regarding >>>> >>>> >>>> Konrad Windszus commented on SLING-9648: >>>> ---------------------------------------- >>>> Someone would need to spin a release. [~cris_rockwell] Do you want to >>>> give it a try? >>>> >>>> >>>> Sure! Haven't released to Maven Central before, so I would like to >>>> try. I found a release management doc < >>>> https://sling.apache.org/documentation/development/release-management.html >>>>> on the Sling website. But as of now, my keys is not included in >>>> the linked sling.asc file >>> >>> Try logging in to https://id.apache.org <https://id.apache.org/> >>> <https://id.apache.org/ <https://id.apache.org/>> . You should see a form >>> with a >>> field named 'OpenPGP Public Key Primary Fingerprint: '. Fill it in with >>> the corresponding information and submit. The sling.asc file should be >>> regenerated, but I'm not sure if it's immediate or needs some time. >>> >>> Thanks, >>> Robert >
