raulcd opened a new issue, #677:
URL: https://github.com/apache/arrow-go/issues/677

   ### Describe the bug, including details regarding any error messages, 
version, and platform.
   
   On the main repository we moved to use the KEYS file from:
   
ARROW_KEYS_URL="https://www.apache.org/dyn/closer.lua?action=download&filename=arrow/KEYS";
   
   See:
   - https://github.com/apache/arrow/issues/47084
   
   They might not be synchronized.
   
   We should use the release/ version:
   
   - Users use the release/ version not dev/ version when they verify our 
artifacts' signature
   -  https://dist.apache.org/ may reject our request when we request many 
times by CI
   
   So https://www.apache.org/dyn/closer.lua?action=download&filename=arrow/KEYS 
is better than https://dist.apache.org/repos/dist/dev/arrow/KEYS .
   
   I've noticed because I did update the release version of the KEYS file in 
the last weeks but I didn't update the dev/ version as I thought we were not 
using it anymore and didn't see my new KEY on the verification.
   
   ### Component(s)
   
   Developer Tools


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to