On Fri, 8 Mar 2024 at 22:17, PJ Fanning <fannin...@gmail.com> wrote: > > Hi Stepheny, > > Can you remove the old RCs from > https://dist.apache.org/repos/dist/dev/incubator/sdap/ ? > > Is the signing key in > https://dist.apache.org/repos/dist/release/incubator/sdap/KEYS ? With > releases, you are supposed to point users to this file not provide a > link to https://keyserver.ubuntu.com
The KEYS file must be linked from https://downloads.apache.org/incubator/sdap/KEYS The dist.apache.org host is for staging the files, not for general publication. > On Fri, 8 Mar 2024 at 18:55, Stepheny Perez <skpe...@apache.org> wrote: > > > > Hello everyone, > > > > This is a call for a vote to release Apache SDAP (incubating) version > > 1.2.0-rc4. > > > > The Apache SDAP community has voted to approve release of Apache SDAP > > (incubating) version 1.2.0-rc4. > > > > We now request the Incubator PMC review and vote on this release. > > > > SDAP community thread: > > https://lists.apache.org/thread/h9g3cdok0py2vjp1pplz1wq4ofl4sbjx > > > > Changes made between previous candidate (rc3) and this one (rc4) are as > > follows: > > - Updated SDAP to use Poetry package manager to more explicitly manage > > dependencies and transitive dependencies. This was needed to ensure no GPL > > license dependencies are used by the software. > > - Patch for domspurge helper script > > > > Instructions for building docker images from source can be found here: > > https://github.com/apache/incubator-sdap-nexus/blob/1.2.0-rc4/docs/build.rst > > Instructions for deploying locally to test can be found here: > > https://github.com/apache/incubator-sdap-nexus/blob/1.2.0-rc4/docs/quickstart.rst > > The release files, including signatures, digests, etc. can be found at: > > https://dist.apache.org/repos/dist/dev/incubator/sdap/apache-sdap-1.2.0-rc4/ > > > > For convenience, the tags we built the release artifacts to be voted on > > from are 1.2.0-rc4: > > > > - ingester: > > - URL: https://github.com/apache/incubator-sdap-ingester/tree/1.2.0-rc4 > > - Commit: 5c116badfaf913734d017d41acc765ed3fd978a1 > > > > - nexus: > > - URL: https://github.com/apache/incubator-sdap-nexus/tree/1.2.0-rc4 > > - Commit: 3fce31f08b9057db446036724e8bc62dd6d1560a > > > > For verification, the hashes (SHA-512) of the .tar.gz artifacts we are > > voting on are as follows: > > > > apache-sdap-ingester-1.2.0-incubating-src.tar.gz: > > 7301c54e765882c45f6efe4a06463b837ace62b6eea2ae5437113357466e52f1d905c3c9d46295f1b1058b9ecf5025942f8a89b2c53a1b0d6b69cd52a8890257 > > > > apache-sdap-nexus-1.2.0-incubating-src.tar.gz: > > 1a2907f9c36dbf0b4b25d54c095303ab0602fa9e0a9423deceae402ffd9a360e21ba832c3ea497d8eccbc6c91fedd2926b3b33181a14c22d50d0ec996282bc75 > > > > Release artifacts are signed with the following key: > > https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x2E8418801953621FAA322169D6F360887071C194 > > > > Please vote on releasing this package as Apache SDAP (incubating) 1.2.0. > > > > The vote is open for 72 hours and passes if at least 3 +1 PMC votes are > > cast. > > > > [ ] +1 Release this package as Apache SDAP (incubating) 1.2.0 > > [ ] +0 No opinion > > [ ] -1 Do not release this package because ... > > > > Thank you, > > Stepheny > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
