Hi Imesh, Thanks for all your work on the release, I am re-iterating points since releases (frequency and quality) is a key measure of the project health.
* Just so we are clear, its not advisable to have a cut of time for releases at the end of 72 hours. For some decisions, 72 hours is enough for every one to respond or silence can be assumed as consensus. But releases we rather wait for a minimum of 72 hours with a goal to achieve a quorum. For major releases like the 4.0.0, its better majority of the PPMC (PMC) spends time verifying. For instance 4.0.1 will be a bug fix release so not much change in terms of dependencies and packaging so we can use less diligence and focus on testing bugs. * The better job we do for releases, it saves times and confidence (both legally and technically) for down steam users, so busy (P)PMC members who gasp for time, it will be nice to put release verification as the minimum contribution to the project. * Bundled dependency jars into a single jar is ok, but better to be clear in the associated README file. * It will be good to check on the maven jars. I quickly looked at one - apache-stratos-cartridge-agent-4.0.0-incubating.jar at could not figure out if it has anything significant in it. The DEPENDENCY file within the META-INF of this jar has list but could not find anything in the jar itself. * The KEYS file is not advised to go onto mirrors (basically avoid co-residing with the artifacts). The best place will be - https://dist.apache.org/repos/dist/release/incubator/startos/KEYS Suresh On Apr 30, 2014, at 5:17 AM, Imesh Gunaratne <[email protected]> wrote: > Thanks Suresh for the feedback. Please find comments in-line: > > On Wed, Apr 30, 2014 at 1:56 PM, Suresh Marru <[email protected]> wrote: > -1 on the release. > > There are no incubator disclaimers in the artifacts. > > Hi Imesh, > > * Its too soon for you to take this vote to the general list, with a fleet of > IPMC members on this PPMC, it will be a shame to go ask for help on general > with 0 IPMC votes on this list. > > Thanks for pointing out. > > * Releases are not customary to keep for 72 hours, for the size of this PPMC > I expect lot more vigilant participation in release verifications. > > * I see some discussion of functional testing but no verification of any > license and notice files. For instance the > apache-stratos-cli-4.0.0-incubating LICENSE file lists whole bunch of > licenses and all I see is one jar in this package. > > Yes what you have noticed is correct. The reason for this is that > apache-stratos-cli-4.0.0-incubating (CLI) has packaged all dependent jar > files into one jar file. Do you think we need to change this model? > > * Incubator disclaimer is mandatory in all artifacts. > > Yes we will fix this. > > * Before I spend any more time, did the PPMC dig up previous release > discussions and guidance and verify all of them are addressed for this > release as well? > > Yes we actually did but we have missed the DISCLAIMER files. > >
