On 14 August 2018 at 08:12, SHUANG SU <sushuang0...@gmail.com> wrote:
> Thanks.
>
> Sorry for the mistake. The correct vote thread should be
> https://lists.apache.org/thread.html/4a551cd183a7ec74c2f5629b8c2c128f82cff6d044d524fcc4d2a175@%3Cgeneral.incubator.apache.org%3E

I think you misunderstand me.
I am saying that the link should not be included in announce emails as
it is not relevant.

> Is <http://www.apache.org/dist/incubator/echarts/> the Apache mirror link?
> It has been included in the download page http://echarts.apache.org/download
> ,
> (It is the button-like link under the title of "Download Source"). KEYS is
> also included in
> this link.

No, that is a link to the ASF backup mirrors.

The release artifacts must use the ASF dynamic mirror system.

> About the online builder, we've made the auto-check tool to ensure the
> correctness during the process of publish.
> But I have not found a way for end-user to check the downloaded file since
> the online build is totally run on the
> browser, without server and without pre-build. Fortunately we have not
> received a report about any fail on download stage.
> But I am considering may be a shell command can be provided for end-user
> to check the version and some
> features of the content.

The point here is that artifact downloads must be accompanied by
hashes and sigs.


> Thanks
>
>
>
> sebb <seb...@gmail.com> 于2018年8月13日周一 下午5:21写道:
>
>> On 10 August 2018 at 11:35, SHUANG SU <sushuang0...@gmail.com> wrote:
>> > Hi all,
>> >
>> > The Apache ECharts (incubating) team is proud to announce Apache ECharts
>> > version 4.1.0-incubating.
>> >
>> > ECharts is a powerful, interactive charting and visualization library.
>> >
>> > Vote thread:
>> >
>> https://lists.apache.org/thread.html/67dffef28ecffd66689ac991ca027c0868d734629949d958e7b12dd3@%3Cdev.echarts.apache.org%3E
>>
>> The vote URL is not normally included in announce emails, as they are
>> published outside the developer community.
>>
>> > Download Links: http://echarts.apache.org/download
>>
>> The download page does not use the ASF mirror system, there are no
>> links to KEYS, sigs or hashes and no details on why/how to verify
>> downloads using sigs or hashes.
>>
>> Also the online builder is clever, but does not provide any download
>> verification.
>>
>> > Release Notes:
>> > http://www.apache.org/dist/incubator/echarts/4.1.0/RELEASE_NOTE.txt
>> >
>> > Website: http://echarts.apache.org/
>> >
>> > ECharts Resources:
>> > - Issue: https://github.com/apache/incubator-echarts/issues
>> > - Mailing list: d...@echarts.incubator.apache.org
>> >
>> > Thanks
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
>> For additional commands, e-mail: general-h...@incubator.apache.org
>>
>>

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to